Downloads.zip
- SHA256 31b3e3c116c2933746f1fa30dbd8dc8ebd1f57da9ee30884349e8688db4b4eeb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Extreme Injector v3.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
600 seconds
Behavioral task
behavioral2
Sample
Extreme Injector v3.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
2 signatures
600 seconds
Behavioral task
behavioral3
Sample
Memense [Cracked by @miarey].dll
Resource
win10v2004-20260513-en
windows10-2004-x64
16 signatures
600 seconds
Behavioral task
behavioral4
Sample
Memense [Cracked by @miarey].dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
15 signatures
600 seconds
General
- Target Downloads.zip
- Size 5.5MB
- Sample260624-vcsvmadw9v
- SHA256 31b3e3c116c2933746f1fa30dbd8dc8ebd1f57da9ee30884349e8688db4b4eeb
- MD5 030443bcf145bb5154119c8322acb7a8
- SHA1 a99cca567cc1fd304123ce914aa625736ca44202
- SHA512 75703e63c78647359e84244707e88797c7fdef76cdc34ec0c0b8f8c2bcbf9365f790502af7e19b215d28744eeb77e189e60ecf236b58c49f816f1495b932e40c
- SSDEEP 98304:Yfg7TuNtNcQlUVLv+hoWpxh6+kGLSakv/VT7W06SyXqtX5MWwPntiRWSsyx/NtoE:YyTwNVlQv+KQLS/v/VTgSy69O/ntJSzP
- TLSH T1DC4633511784EC0213895461923273EE49298F289FE89BB77D98F7F0E8B4EF117641BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Extreme Injector v3.exe unpack001/Memense [Cracked by @miarey].dll
File Explorer
-
Downloads.zip.zip 5.5MB
-
Extreme Injector v3.exe.exe 1.9MB
-
Memense [Cracked by @miarey].dll.dll 12.0MB
Extreme Injector v3.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b65f40618f584303ca0bcf9b5f88c233cc4237699c0c4bf40ba8facbe8195a46
- MD5 ec801a7d4b72a288ec6c207bb9ff0131
- SHA1 32eec2ae1f9e201516fa7fcdc16c4928f7997561
- SHA512 a07dd5e8241de73ce65ff8d74acef4942b85fc45cf6a7baafd3c0f9d330b08e7412f2023ba667e99b40e732a65e8fb4389f7fe73c7b6256ca71e63afe46cdcac
- SSDEEP 49152:NNEVtO1U1y1DDDDDD7Llngq7NNMqU0p2Vhk9a:NNEVJyZlng4p2V
- TLSH T1B8956D997650B69EC89BC932CAE51C2CF760A07B571BC343A46325EC9D4DA9BCF041B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1955422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Memense [Cracked by @miarey].dll
- IMPHASH b45ce12bb6ab17d8c32e264240dcd835
- SHA256 7f8b71ddb61965b5fd8f49312e0cffd7203643465a8cc30a96c31508b3dde39a
- MD5 eb4cf3ff356f969d8223279d569e5c54
- SHA1 23101734cb2b7972596954dfc01250470950e81a
- SHA512 cc7be7f8ee35667becf5cea741cc4460db530f3f18026d2a897651a38661415b50ae47a089483dd3514cb0b6eb381a25891378653c10f51bb0dc1abfc5ba8227
- SSDEEP 196608:0vnj8PBRjjZgDpJ7LBz7o3vgLlua/GYH:0vjaSJhzM341
- TLSH T15FC68A2B1B53B1A5902852FE0CFF371C26B8B3D6EA4877C6C15DF82E4B156C914272DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
11786104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
CreateDirectoryW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MessageBoxW
shell32
ShellExecuteW
vcruntime140
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9.6MB
Virtual Size
9.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
756B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.Val
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.}{9
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wHu
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
233B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ