boxed.zip
- SHA256 25b6e2ad317b2ecbf7807e0e042f2a2801721e911876f7a5e6a51c9ab690b707
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
boxed.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
boxed.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target boxed.zip
- Size 1.1MB
- Sample260704-pgvbcse17v
- SHA256 25b6e2ad317b2ecbf7807e0e042f2a2801721e911876f7a5e6a51c9ab690b707
- MD5 d73f3f59b251af440851a80a0c424dfe
- SHA1 30ebe76a9ad49d8dc4273110274161659e17c9d7
- SHA512 2406d7104e70d4c6ab7ae052de7234242fd7937a1ec38fbd740406df58de8ab4dae21058ea1f1c7dfd48a6a2cdcde193da371eea2d14994d2b62925515b53dd8
- SSDEEP 24576:qL31ITEXePdmReGUu2fxFAy1IKEO+2DvnWbkd9K4e7Sswr9NoNjyYdo/18hGh6Cm:elIq/9+TN1oP0WbEzemJr9qL+uGh6S4
- TLSH T1754533FEE9888FA0023677D325001B454500F5CA265DFC538FE1DAEFA48A67E5A5E48B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/boxed.exe
File Explorer
-
boxed.zip.zip 1.1MB
-
boxed.exe.exe 2.2MB
boxed.exe
- SHA256 2385eeed470a174a7237d630bded614f68cf70c3475947cbab84162dcf9700ce
- MD5 14e06fcf03c66d88e663adfce46d852e
- SHA1 076fe30a3cd13b63bdcc75242e4f1f8a5a59ec2c
- SHA512 7754852ce2c73cdb1dfe80c31f8f157e123f016127026c17787fab7dee641bac0f4994ce7bba6500fad7d8c32fbc0b5849a4bb8021e0058375d63a3e3ec2072f
- SSDEEP 24576:ZdFshs4it3olLZh+uMiyHM/ahzP6RERGIsWxoOzwS6O+qDcIodstbokJMxqavDz8:Zj6PhUod1vDSLyh7N
- TLSH T162B5ADB7B11089F8E09AC579579279E21B233D150BA7658E01F437870E73ED3AE6D80B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
196308
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
251KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
781KB
Virtual Size
780KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
275KB
Virtual Size
274KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.enigma1
Size
224KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.enigma2
Size
732KB
Virtual Size
732KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=141, id=261, version=33145,
count=12, id=260, version=33145,
count=8, id=259, version=33145,
count=9, id=259, version=35207,
count=16, id=260, version=35207,
count=41, id=261, version=35207,
count=7, id=257, version=30151,
count=117, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=1, id=255, version=35223,
count=1, id=258, version=35223,