Release.zip
- SHA256 e8d6383f050366002f2b283bc393e77c9e4ac962ef59369bb71136a7909f7a52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Test.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
15 signatures
150 seconds
General
- Target Release.zip
- Size 2.0MB
- Sample260425-ml58baft61
- SHA256 e8d6383f050366002f2b283bc393e77c9e4ac962ef59369bb71136a7909f7a52
- MD5 d6fc730a93a17f36a051a50668249687
- SHA1 6a07bc01bfbba9072427c1edfe8e3039574398bc
- SHA512 594be8e5d91d9ca263a79d42f3b9ed7603cd84e4e9e1eb77bcd03affb4d926c0c8fcd90c36e1528769794d53509527addabec54de4fe6019f506af2740ac0890
- SSDEEP 49152:VL2lrbNvLdgW5VQd3E0QpRY9Z+wis9Bpl1Lc3E+tGHHjioocR7CQ:lirbNvp//03E0QHsH9BplSfKi9OeQ
- TLSH T13BA53326F30EABC5A8EC7B773EA4EDDC79CD2A20DC5355B9CEB1B41D25061ACA114C09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Test-checker.exe unpack001/Test-uninstaller.exe unpack001/Test.exe
File Explorer
-
Release.zip.zip 2.0MB
-
Test-checker.exe.exe 7KB
-
Test-uninstaller.exe.exe 8KB
-
Test.exe.exe 2.5MB
Test-checker.exe
- SHA256 7be4eb5107014b618ef004ebedaf9f3e228c56a8985b34c39aae3cd5aef4eefa
- MD5 67a7e1eda2bed28ab10d80750dfc144f
- SHA1 fe9243d79d46adac1921927506429ae68b2aa4ca
- SHA512 1ee0b3b618010da7234c9d5107f03367bb94bf622f97e1a69261b843461ad288ee2cffaafa6e03a77b2efaabbda4522eb3d855db22b52b33f26fe0ca51bb7f7c
- SSDEEP 96:V04mlETHJU0RsAHrTcFsZZihpiWZ5mus/ECVxrXPXI+/lloR:8EDJU0RnLwFqZCpiWZ5mFECV5ftvo
- TLSH T10EF13110AEEA11D9F17F47315BF5B7B31672E8B2652EA3B9648082494F70AC4CCB1E74
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Test-uninstaller.exe
- SHA256 813729f459bcfe45b1749b4eb0070eeaa152f663d4f306b1aed9f38dab47ad5d
- MD5 f9818bbe671b339246bbd0e89d50e154
- SHA1 d1e766f8adfd6b027581cbe4ec60c283d82acaea
- SHA512 818f46c53651de1f880a40dc7c259f3f7d8f1d9229f177a48d1bd22e2b5a314ed89e7c24f35de4430b886bd7aa4d4ba5d8bf55ed7c9e54e00d2311d44cb77995
- SSDEEP 192:vM2axTNcy4WNFbip9/ijG/D8D27y587o:5mcaFOp96I8D6yW7o
- TLSH T1CB020A20EBDC4255E6AF0F3424B253171BF0F2424B27D76F58C9528A5E92B8087A2796
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Test.exe
- IMPHASH de41d4e0545d977de6ca665131bb479a
- SHA256 8dddf6cb2a4910b244c16317c85782415cc5ebc95db3dda17023aa4c6e9bbc20
- MD5 db4f21fbb60ac3772f71f12dabee93d3
- SHA1 77d43945921de5980cdec8e598d3deed448c8397
- SHA512 9d1823c01e36a84109e999eccf2bee3eb258b414689400a1d81e379bc8abf03d6f44d6d10be8e7ab86185a0e205f681859901b6a89626d605f10b98cffeb5459
- SSDEEP 49152:MHKMMMBiMuG1f0M0MMM0aMMMMMMMMM3MMM7yMMON2kDREibHfUEWME/ZYSpg/D1H:MHKMMMBiMuG1f0M0MMM0aMMMMMMMMM30
- TLSH T14FC533C402D273B6E8A761BE12820F30580EB0E5877195F7F994B671BFADBCD5838466
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4416
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
msvcrt
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ