Overview

overview

7

Static

static

3

test-shell...sm.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    test-shellcode.zip

  • Size

    1.9MB

  • MD5

    7a4985a55e4997adbf96b909b01c46fe

  • SHA1

    735f539fb4727e91b34c8d7bc7918ce6f81f334d

  • SHA256

    fc9c4f2fd32a30b8b0ecc4ab377fc55add4a15fcd1588e7cc2d07dcbfb21874a

  • SHA512

    40fa49c6ac46f34cb7480695d5e189f3ff44106ae0b7173f51e62c77263903e526c591cefdf45692aa7f38d09383e3a99f2ecea48c10cb96af2359b25147372a

  • SSDEEP

    49152:3gQAbimchwhoXTLXoCmaTPSpuFA9lmDFavNAR8IaZm4Osm:3hmIfYpEdq9sD8vNUbazpm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • test-shellcode.zip
    .zip
  • test-shellcode/GoLink.exe
    .exe windows:4 windows x86 arch:x86

    0cc5fb87aeee13b3c12c32093477687a


    Headers

    Imports

    Sections

  • test-shellcode/donut_v1.0.zip
    .zip
  • LICENSE
  • README.md
  • donut.exe
    .exe windows:6 windows x64 arch:x64

    ef81b9a18c758ad2cb875d81e1e4b658


    Headers

    Imports

    Sections

  • examples/dynamic.c
  • examples/static.c
  • lib/aplib32.a
  • lib/aplib32.lib
  • lib/aplib64.a
  • lib/aplib64.lib
  • lib/donut.dll
    .dll windows:6 windows x64 arch:x64

    7f25d083ecb308b9e527d00a208ab6b4


    Headers

    Imports

    Exports

    Sections

  • lib/donut.exp
  • lib/donut.h
  • lib/donut.lib
  • test/inject.exe
    .exe windows:6 windows x64 arch:x64

    2cac3dd710b7f6702ab5f69bf33d01d0


    Headers

    Imports

    Sections

  • test/inject_local.exe
    .exe windows:6 windows x64 arch:x64

    d4f452e99557dab1c048a3c77c847e5b


    Headers

    Imports

    Sections

  • test-shellcode/donut_v1.0/LICENSE
  • test-shellcode/donut_v1.0/README.md
  • test-shellcode/donut_v1.0/donut.exe
    .exe windows:6 windows x64 arch:x64

    ef81b9a18c758ad2cb875d81e1e4b658


    Headers

    Imports

    Sections

  • test-shellcode/donut_v1.0/examples/dynamic.c
  • test-shellcode/donut_v1.0/examples/static.c
  • test-shellcode/donut_v1.0/lib/aplib32.a
  • test-shellcode/donut_v1.0/lib/aplib32.lib
  • test-shellcode/donut_v1.0/lib/aplib64.a
  • test-shellcode/donut_v1.0/lib/aplib64.lib
  • test-shellcode/donut_v1.0/lib/donut.dll
    .dll windows:6 windows x64 arch:x64

    7f25d083ecb308b9e527d00a208ab6b4


    Headers

    Imports

    Exports

    Sections

  • test-shellcode/donut_v1.0/lib/donut.exp
  • test-shellcode/donut_v1.0/lib/donut.h
  • test-shellcode/donut_v1.0/lib/donut.lib
  • test-shellcode/donut_v1.0/test/inject.exe
    .exe windows:6 windows x64 arch:x64

    2cac3dd710b7f6702ab5f69bf33d01d0


    Headers

    Imports

    Sections

  • test-shellcode/donut_v1.0/test/inject_local.exe
    .exe windows:6 windows x64 arch:x64

    d4f452e99557dab1c048a3c77c847e5b


    Headers

    Imports

    Sections

  • test-shellcode/passing_data.c
  • test-shellcode/passing_data.exe
    .exe windows:6 windows x64 arch:x64

    84d65c21a05ae0b5dbe524d322b010c0


    Headers

    Imports

    Sections

  • test-shellcode/passing_data_raw_hxd_export.c
  • test-shellcode/random_shellcode.bin
  • test-shellcode/sclauncher64.exe
    .exe windows:6 windows x64 arch:x64

    072ddad63c6710d6987f38f1a9619ce3


    Headers

    Imports

    Sections

  • test-shellcode/shc_clean
  • test-shellcode/shc_with_quotes
  • test-shellcode/shellcode2exe.bat
  • test-shellcode/yasm.exe
    .exe windows:5 windows x64 arch:x64

    6d5b5fea9fc8cb683a4063c205e5b2de


    Headers

    Imports

    Sections