LOGD777HH002.UU.rar
- SHA256 e8c0ef0afc92f7c3c18ff2a98219699720f034ecd3fbd11f21e0d39da4d56b5e
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LOGD777HH002.exe
Resource
win10v2004-20250619-en
windows10-2004-x64
6 signatures
150 seconds
General
- Target LOGD777HH002.UU.rar
- Size 638KB
- Sample250725-fwkwsswnw9
- SHA256 e8c0ef0afc92f7c3c18ff2a98219699720f034ecd3fbd11f21e0d39da4d56b5e
- MD5 fd00974c082b17bcf9174ed7dec3683e
- SHA1 aa7935e3ec2dab2991c57360f21035b455d2415b
- SHA512 bd6ad0bd08f320c0f154d2e2cea9efd26067d5676753e2af5153d7cb5abae2e8e81e6e4a568028cb72f96b0e3da98087660ebffe42f7a14ceb8e1f95c87d6aef
- SSDEEP 12288:a+TvkT+u0l6C5+/tSVKT2ZlZKVgM8y3drckkGSUkfn6zl39Z5YVSBAwkFalt:3vI50kCo/kVKglZAgM8yNIkkGyn6zXZD
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/LOGD777HH002.exe
File Explorer
-
LOGD777HH002.UU.rar.rar 638KB
-
LOGD777HH002.exe.exe 1.3MB
LOGD777HH002.exe
- IMPHASH 3b7c4a0ab465369610558059bc25b774
- SHA256 8768adcf3b14b78ec2c34fdf77ea9cf25f53bf8fe7ab374ac4c5246779b87b64
- MD5 f546b3c2276ca517216ca1ddcd597959
- SHA1 703c7907fc0f823b183983bc54c63ef01f1574a6
- SHA512 8f1e03746e46ac05c5134f755078ff7dbd1f2612f6f33aa4edc5bf8050965545803093d4892e30b55aa2bc9fbf17241bd8360849ac5d22e599fdfeb05866df68
- SSDEEP 24576:0HKCpyFxMQJZnJHdIxiOlpiHwBpsOeKxL0uVIxiOlpiHwBpsOeKxL0uP:uKC1pqJuXw1pqJuXP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
235336
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
CreateThread
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
user32
BeginPaint
CreateWindowExW
DefWindowProcW
DispatchMessageW
EndPaint
GetMessageW
KillTimer
LoadCursorW
PostQuitMessage
RegisterClassW
TranslateMessage
UpdateWindow
gdi32
CreateSolidBrush
Rectangle
SetBkColor
SetTextColor
Name
.text
Size
372KB
Virtual Size
372KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
80KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.eye
Size
420KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.eye
Size
420KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE