Voltaris.zip
- SHA256 2eea06cac6ce9b1ad531fdbe891f8885e02e00ef20b7615535d2783069d2519a
Password
voltaris
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Voltaris.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Voltaris.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target Voltaris.zip
- Size 4.9MB
- Sample260629-bfst9aa13m
- SHA256 2eea06cac6ce9b1ad531fdbe891f8885e02e00ef20b7615535d2783069d2519a
- MD5 6348796c5d844f0b7a20ed597a3fe0f4
- SHA1 898b1e70348561be2b67a22208bf2116ba74ddee
- SHA512 065162ae59509bb0e9a78e08a6b15ee3793e6f2011b305e25a326469003eb82f5e269a6de4b55cd73120fb02656ca4a9dfe45a1eee7f2f369a6bf7db6073040a
- SSDEEP 98304:SDa7HEEttkD0BoZlAKdWgCMu4aupgigMIAgpiKvF0MdU+dNY6:SDa7tJGlAsuROLKiKvF86
- TLSH T1F13633C43E09E4255B7BC6ED4C384AC585F8B5B1D648F271F8BE25C98984FE946C8B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Voltaris.exe
File Explorer
-
Voltaris.zip.zip 4.9MB
-
Voltaris.exe.exe 10.0MB
Voltaris.exe
- IMPHASH 652c45169574bb54d0e1b5b4f6fb8a9f
- SHA256 b32c80d7fc2f50b327554620912bd7c68b7aeda5e05d1f4706bd96aa79bea3dd
- MD5 62b944afb915965ce38206c4d160c71e
- SHA1 7e48214f9bc6ab8892d98d44cbc7c48a95c1f3e2
- SHA512 e4fcd3cc226fb925d4f290936b2e1e464f53afc8e5c51e68d10ba42e805747a8a396dac39a49a3d897ba1e64fac596d2a5225390f02a3281b4cc41316d8f30f4
- SSDEEP 49152:sLGiOciPreU0fz8HEPgRqBfe59hwkokcMN6FOSpHzu+PxgD+L7qjrTeTo2WN2+sp:s+e3fz8
- TLSH T170B68ECA126AD2DEC246BEBD4B343F955EE9468E085980E0BD765E51AFB103B4CF4D30
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
voltaris
Minor OS version
0
Major OS version
6
Entry point
79572
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
CyptInMemory.pdb
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
kernel32
GetModuleHandleW
CreateFileW
GetProcessHeap
HeapFree
GlobalMemoryStatusEx
GetSystemInfo
HeapReAlloc
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetLastError
SetLastError
GetEnvironmentVariableW
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WaitForSingleObject
CloseHandle
MultiByteToWideChar
WriteConsoleW
GetCurrentThreadId
GetCurrentDirectoryW
GetCurrentProcess
RtlCaptureContext
GetProcAddress
ReleaseMutex
WaitForSingleObjectEx
LoadLibraryA
lstrlenW
GetCurrentProcessId
CreateMutexA
WideCharToMultiByte
HeapAlloc
GetModuleHandleA
GetNativeSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
FreeLibrary
IsBadReadPtr
SetFilePointerEx
FlushFileBuffers
HeapSize
LCMapStringW
CompareStringW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
DecodePointer
TerminateProcess
RtlUnwind
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
user32
GetCursorPos
SetRect
GetSystemMetrics
ntdll
RtlNtStatusToDosError
NtWriteFile
Name
.text
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9.3MB
Virtual Size
9.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
418KB
Virtual Size
418KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=33145,
count=146, id=261, version=33145,
count=19, id=260, version=33145,
count=21, id=259, version=35207,
count=17, id=260, version=35207,
count=39, id=261, version=35207,
count=7, id=257, version=33145,
count=116, id=1, productName=Unmarked objects,
count=1, id=260, version=35222,
count=4, productName=Unmarked objects (old),
count=1, id=255, version=35222,
count=1, id=258, version=35222,