84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c.zip
- SHA256 5b85553e0dd27a9279c2e23855789e3b7ae5f2abe4556329892861f20142db5e
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
17 signatures
150 seconds
General
- Target 84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c.zip
- Size 46KB
- Sample260702-dnnavabv2t
- SHA256 5b85553e0dd27a9279c2e23855789e3b7ae5f2abe4556329892861f20142db5e
- MD5 055e865425c02a85793d328eb51fb92f
- SHA1 ba02abc20a54af6652295c46b389248e25e00a6c
- SHA512 c9ad5ee5d2c8840e80da4bcf758bf285eea6acf1e44acaa72a4090ddd9066896c7fe68757832ce2457a5421ba9d072933c5f71a9f589c288275a6fa5f640a6c0
- SSDEEP 768:tAwVPvK400FITuuS4w3zNsZNaz5qIs0WFJlwIvaUodTxThj9wEXOyGkbdGP:tAwFj0fyuTwuN0X4JmD1ThjpGk8
- TLSH T13F2302B88256330B074FC08DCBAB54B56DEE81667A1115C93DDF4D721EA83ABF650C08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c
File Explorer
-
84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c.zip.zip 46KB
-
84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c.exe 46KB
84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c
- IMPHASH 826f5d0d5613ac1228a304538decede5
- SHA256 84195730129823c9956a2a10a20776a88aa8e613cbef264e610a50f4fb68543c
- MD5 1a1fa5f5f6858550d46d8d07594a0147
- SHA1 29c6db1b71bda6d0ec85a696bd1e72569e3d84ed
- SHA512 6dd08d688860b7af2d5c9da47b196129d29f342f29905eb4ff573ff43f806793f73ff76484eb220ee63a352afe6194a32ddafaf53cd7811c11349cca8513222d
- SSDEEP 768:IygxkWvxxe5KA/5smzOe3Ql6WQAqUbjnG6qzZD+:5UzvDIKAxae3/nzUu
- TLSH T1DA23091AFEE3D0ECC126D5B492F98A36F572FC5104305E2E43D0DA761E66A509E2CE1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
CloseServiceHandle
ControlService
EnumDependentServicesA
OpenSCManagerA
OpenServiceA
QueryServiceStatusEx
kernel32
CloseHandle
CreateFileMappingA
CreateFileW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindFirstVolumeW
FindNextFileW
FindNextVolumeW
FindVolumeClose
FlushFileBuffers
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetDriveTypeW
GetEnvironmentVariableW
GetFileSizeEx
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemInfo
GetTickCount
GetVolumePathNamesForVolumeNameW
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
MapViewOfFile
MoveFileExW
OpenProcess
Process32FirstW
Process32NextW
SetFileAttributesW
SetProcessShutdownParameters
SetUnhandledExceptionFilter
SetVolumeMountPointW
Sleep
TerminateProcess
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteFile
lstrcatW
lstrcmpA
lstrcmpW
lstrcpyW
lstrlenA
lstrlenW
mpr
WNetCloseEnum
WNetEnumResourceW
WNetGetConnectionW
WNetOpenEnumW
api-ms-win-crt-environment-l1-1-0
__p__environ
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-multibyte-l1-1-0
_ismbblead
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memcpy
api-ms-win-crt-runtime-l1-1-0
_set_app_type
__p___argc
__p___argv
__p__acmdln
_assert
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_initialize_narrow_environment
_initterm
_initterm_e
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
rstrtmgr
RmEndSession
RmGetList
RmRegisterResources
RmStartSession
shell32
SHEmptyRecycleBinW
ShellExecuteW
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
924B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
988B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ