adsadaw.zip
- SHA256 1c4187678ad0d17bd66f8ffc6a920646df861bfe579a7a2ff20cd359c00595d4
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
adsadaw/New-installer-Peepcracks.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
adsadaw/New-installer-Peepcracks.exe
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
18 signatures
150 seconds
General
- Target adsadaw.zip
- Size 3.5MB
- Sample260702-ce6kdshv2n
- SHA256 1c4187678ad0d17bd66f8ffc6a920646df861bfe579a7a2ff20cd359c00595d4
- MD5 28a32fda947dd50f6392509999dcc5cd
- SHA1 28c14e06ed0023fd64ab3dbff0e2141b114c4eae
- SHA512 1fa0062270d5069e56fa6cd73188ba7d86664cd068cfea8690ec5e58ee572c3a8e5a0ff1afd9bccbdd201b7cf4b514f1569ad76cb96c7749314242c44ff52aac
- SSDEEP 98304:Zy2z2P4rym43wgBgZlGvxvkNpNm54niXFijz:8U2MG2XNJiCz
- TLSH T1B3063375889B065180CD3C6652B0F9802CC6FEECC9535E7D0739939E2748F6BA9FCA61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/adsadaw/New-installer-Peepcracks.exe
File Explorer
-
adsadaw.zip.zip 3.5MB
-
adsadaw/New-installer-Peepcracks.exe.exe 3.6MB
adsadaw/New-installer-Peepcracks.exe
- IMPHASH 8b9feb60f89ce6247212e5ed5b43cea0
- SHA256 d7d6ce7010b9ef46f5a6063867034b8825381c194df13d01d42dd6db79292ea1
- MD5 2f091205dc497be38e8eed98decd0a58
- SHA1 0425f4665036dd6260fb9c2342b2c643310ad367
- SHA512 52169addc5f0a28dc45e99c7c098a864929607177f037268afad38fe48283043b9ab01bbf1116b48dbb452c1c9bd111f35c267d08d99b8686d1f84bf695be3bf
- SSDEEP 98304:syEB6P+jqM4hAA98jBGrHvYZjNo5Uryzlu/5:bu6gGEdNT2y5
- TLSH T1CA063322689782F4C08D9C3042A1E59178A2B9DD4F225DFF0769926D2F48FE65F7C734
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
101444
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
stub.pdb
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WaitOnAddress
WakeByAddressSingle
kernel32
GetModuleHandleW
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcess
ReadProcessMemory
WriteProcessMemory
CloseHandle
CreateProcessW
GetLastError
WaitForSingleObject
SetLastError
GetFullPathNameW
GetCurrentThreadId
SetFileInformationByHandle
CreateFileW
SetFileTime
GetProcessHeap
HeapFree
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetStdHandle
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetCurrentDirectoryW
lstrlenW
GetProcAddress
WideCharToMultiByte
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
ReleaseMutex
DeleteFileW
GetEnvironmentVariableW
HeapAlloc
MultiByteToWideChar
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
CreateWaitableTimerExW
SetWaitableTimer
Sleep
FlsFree
FlsAlloc
GetModuleHandleExW
FlsSetValue
IsThreadAFiber
FormatMessageW
GetModuleHandleA
GetTempPathW
QueryPerformanceFrequency
user32
MessageBoxA
ntdll
NtWriteFile
RtlNtStatusToDosError
vcruntime140
memmove
__current_exception_context
__current_exception
__C_specific_handler
_CxxThrowException
__CxxFrameHandler3
memcpy
memcmp
memset
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_seh_filter_exe
_configure_narrow_argv
_initialize_narrow_environment
_initterm
_initterm_e
exit
_exit
_crt_atexit
__p___argc
__p___argv
_cexit
_c_exit
terminate
_get_initial_narrow_environment
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
752B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
640B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35403,
count=3, id=259, version=35403,
count=9, id=260, version=35403,
count=23, id=261, version=35403,
count=11, id=257, version=33145,
count=186, id=1, productName=Unmarked objects,
count=17, productName=Unmarked objects (old),
count=1, id=258, version=35728,