hc_sr04_timing_diagram.7z
- SHA256 62cb9109d043eb521ca406f63fececee8be36119231e49ac38a46b95c561f81f
Password
8720
Static task
static1
1 signatures
General
- Target hc_sr04_timing_diagram.7z
- Size 20.5MB
- Sample260627-nz677sa14m
- SHA256 62cb9109d043eb521ca406f63fececee8be36119231e49ac38a46b95c561f81f
- MD5 5c706d9bc686cbd5d2cbc59c88cc9610
- SHA1 e476a944b2954933d1304529832537edc4ad76dd
- SHA512 d864710e9bf5a91f0e012b1489518a5bb32480512ecca29e86df38eb36db56862d601786b87a4964deec7a2b19b2214f80c056b1d2bf54d8dd6b310df259cc7c
- SSDEEP 393216:8SraDIvFQuhdb2BVPcHWu18nB/hvPbKWaWtC9/TBa+e05okF:8SrfKu7brNy/jaWo/I+enkF
- TLSH T1CA273364460916F7316494B609C8BBF8D71A19503EC7A7F2BF4CA11026F2908EBA7DDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/appFile.exe
File Explorer
-
hc_sr04_timing_diagram.7z.7z 20.5MB
-
appFile.exe.exe 873.6MB
appFile.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 2d1a3c46497aef54fe332562ea67e0bc089b2c6095508680961aba64eb3d8b94
- MD5 7da1a7901fe32595505354c24fa42a63
- SHA1 8701c17a18721e5eb8625affb0c0c7bbde926cdc
- SHA512 d79e94dccfdac3c0c369b5da5a195bbece60175063132b30aa29eb67cfd8b7b12a59e49af348fee3dec274dbf824a1c5d3715755d11a2d0dfd9eb5f3c82c6db7
- SSDEEP 393216:ThWZK5GQ/L/NINH4k7FWn7VJ+DAE/WRLjewYXI7288KJoiwr/GgcRei3dl4Pf23+:TP2tdAEJrXsDwredrq2Zdev
- TLSH T15B99BF02B7F80066F5BB973499B68616EA36BC611B31C3DF1290E26D1E737C09E35726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8720
Minor OS version
1
Major OS version
6
Entry point
480608
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
361KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
134KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ