ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce.zip
- SHA256 415305e4904af44f374f4f6f706d56d54e590b6656d30d6ec23c8b411ba39688
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
17 signatures
150 seconds
General
- Target ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce.zip
- Size 47KB
- Sample260702-dnptnsbv2v
- SHA256 415305e4904af44f374f4f6f706d56d54e590b6656d30d6ec23c8b411ba39688
- MD5 4395ab546951b8263c60c47eb1592914
- SHA1 dfc62c28d50b9b4075bc423053dfa3452af5e328
- SHA512 9fbe297ef63d33ffcdc3b473960daea33928e6730fea000cb19429424219c67ba2529ef4a3ca3266ed7f19fd22c9e1c9e44ca935473c0789038d61f4be9bce6e
- SSDEEP 768:NpJoZp9Bjt9SVAHWpfgQRbibt6zpMJzxgQh+TPsX9F6DaE3K2lQzvc3o:NpJczBjt9uDgQRbitGpH2+TPsNFh2iTr
- TLSH T17F230231BF29430ECF7CFE7AC7C26B425C4349D9A98A3147DA7AE1405A9843A631D58E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce
File Explorer
-
ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce.zip.zip 47KB
-
ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce.exe 47KB
ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce
- IMPHASH 9bb6616bf0c48e8ab4eacc9fe6b4345d
- SHA256 ae5ebdadf816f8e67555d61e810366290a40cb90da2aef5460c186f4dcb0a8ce
- MD5 f69309497007165ca40f340e4bc97a3b
- SHA1 c7f9138c0260d292ddeac296f0ae4693176e286e
- SHA512 3efd93c7ed23625bbe4a510c5d2e5e675428d389596d7c5f48b9f00a3eb8c7f1e9a1e3d8e907f4a9c86f7cba78c250baf102d91f8a72e6d7726dc50d28114e28
- SSDEEP 768:/ifgjTM8ynBPNBy2pZfSIP1geKg0Yqrrjqq/fX1XT:aIjTvU5NM+ZqISePCHh
- TLSH T1F823F60ABBE390ECC116D5B4A6FA8A35F671FC5104215F3E47D0D67A1E25A109E2CF2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
CloseServiceHandle
ControlService
EnumDependentServicesA
OpenSCManagerA
OpenServiceA
QueryServiceStatusEx
kernel32
CloseHandle
CreateFileMappingA
CreateFileW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindFirstVolumeW
FindNextFileW
FindNextVolumeW
FindVolumeClose
FlushFileBuffers
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetDriveTypeW
GetEnvironmentVariableW
GetFileSizeEx
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemInfo
GetTickCount
GetVolumePathNamesForVolumeNameW
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
MapViewOfFile
MoveFileExW
OpenProcess
Process32FirstW
Process32NextW
SetFileAttributesW
SetProcessShutdownParameters
SetUnhandledExceptionFilter
SetVolumeMountPointW
Sleep
TerminateProcess
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteFile
__C_specific_handler
lstrcatW
lstrcmpA
lstrcmpW
lstrcpyW
lstrlenA
lstrlenW
mpr
WNetCloseEnum
WNetEnumResourceW
WNetGetConnectionW
WNetOpenEnumW
api-ms-win-crt-environment-l1-1-0
__p__environ
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-multibyte-l1-1-0
_ismbblead
api-ms-win-crt-private-l1-1-0
memcpy
api-ms-win-crt-runtime-l1-1-0
_set_app_type
__p___argc
__p___argv
__p__acmdln
_assert
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_initialize_narrow_environment
_initterm
_initterm_e
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
rstrtmgr
RmEndSession
RmGetList
RmRegisterResources
RmStartSession
shell32
SHEmptyRecycleBinW
ShellExecuteW
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
540B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
432B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ