examples.zip
- SHA256 f432aeea942ee3aeae533450b7fc9c8c7d2b318ff847b03038b945de535d927b
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
examples/sentinel.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
General
- Target examples.zip
- Size 33.5MB
- Sample260707-r4alksfx6v
- SHA256 f432aeea942ee3aeae533450b7fc9c8c7d2b318ff847b03038b945de535d927b
- MD5 af8ba373b6334568ab4f7f38748adced
- SHA1 546fb581452cd98c8eea028cf7d49de128f7c64b
- SHA512 0a16dc7c324ccbea69c5ceec92069b1e9bb5036d32a5eb8b509fae0aef6353d4a5750a4d451ea13702b4e68eeed01cd78a4170d0420f94ebff298b669d3b667e
- SSDEEP 786432:xcHFEnUrbXhNVBvpQohRrJbpEXa4eGCQQc8/eHyy5aI:xcHKiVNLpQoV1Eq4eSJ8/myk
- TLSH T1D9773318A67DE07BD8E40DB255240E21B72651932881252E1F6FB5FE399CDBDBF02F24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/examples/sentinel.exe
File Explorer
-
examples.zip.zip 33.5MB
-
examples/cimport.st82B
-
examples/classes.st409B
-
examples/electricity.cpp817B
-
examples/electricity.st1KB
-
examples/fibonacci.st200B
-
examples/foreach.st770B
-
examples/hello.st64B
-
examples/range.st316B
-
examples/sentinel.exe.exe 118.3MB
examples/cimport.st
- SHA256 827f58f0554d8060090db9bcc818db5de91cb91fda81745d54ccc5cbf57fdca6
- MD5 0dbc7a3a28fbf4ff815691c7ffb2193f
- SHA1 b9e1352b87bd730747fa89310f464cf14d03aa6f
- SHA512 7750a2f5ccd64418d6f3fa5d1d13c524643a5f037341a28dd8451aac49fa7a7eba7149e2190548cc5e399df796881d52a444ef4823567868a5cade03dd2ef4ad
- TLSH T1D5A0120A148812E0612240844005082504264D12F66D71348144121117C2940D8594A4
- MD5 SHA1 SHA512 TLSH
examples/classes.st
- SHA256 7bde1532a877049d9eed35c56fc98d7d6f4db24a8c8ddf85be97f6bc96e31b02
- MD5 6057a0bb8a2d2be5574b8a508a1283e9
- SHA1 f444f65e8dfb6fbe7793e694a0b8c9b513f97817
- SHA512 a269099756c83a2d55735051e65a902df9699b190177799a574cd4013690ac07a522748cd983b8f25279ef1ff521375e6ea7a0cec6a32a85891201614fe98585
- TLSH T1C7E09200AA9953618856C8D1B87250873239AC3B5B972A68F0DEF91CAF4D20DD5F4CEA
- MD5 SHA1 SHA512 TLSH
examples/electricity.cpp
- SHA256 27917602de440db15c0115b817134b47a590f9ef6ef1edbd4230b28cbc4807bd
- MD5 849578adc8cb7e2601e3a3cd722829dc
- SHA1 225ad6699895067f41165e46714db986219b4bcd
- SHA512 8c3ec747fc1111dbce312d883f74d77bb8698905b4611e761fdb9a53084ee4e10b1462af4084072a8edd6ca5b3fba35d9d383ccca4b8575c7b2d9dd5b3d92418
- TLSH T16401491C19FB2491A51762D9F7CF4114A3A96033177CE290FA4F87855F81119F2B1FAE
- MD5 SHA1 SHA512 TLSH
examples/electricity.st
- SHA256 69ca34a4bc08572859ad304b75d39b13b1ad46b97a8e360082a4ef2325a2ace9
- MD5 c340015eb70937c58a0ce5e367e8e67c
- SHA1 a93b226f4a7840aef73eb5df9641577c51123060
- SHA512 926264bb01fa0c5e1b718194e556f1859abf376ef2e618cf183669fa9596df47a36192a12b8d0be3d8e451c39d0881538f588975efba2bea5a70f5e9f5a03c7c
- TLSH T113210121A91310F1F00551DDAFAF821503347A272E46A496BABEC13C1FC076AEAB66CC
- MD5 SHA1 SHA512 TLSH
examples/fibonacci.st
- SHA256 c24a911959b47003c820a05c7b0bd5505442e405b3617c5344643739ffb3887d
- MD5 fd45058b1f4b0a4be0818389926b1d98
- SHA1 8f13959bb9a60f1c9fcb2e855371e4451c05bae4
- SHA512 f7d5f3c96dcff29fa6fa9194fa6b6371c65645d8cd033a5212d337d6b3a5be87b7e3e153c08d8932b3ef3a2d1425d9f4ebddf276f1bd431700b925be488b9bf6
- TLSH T1D2D012F468CDB517C1C1886A9D41E301621DBD7726A97125797C42AD7F45140D1F485D
- MD5 SHA1 SHA512 TLSH
examples/foreach.st
- SHA256 967923e5954790f56106ac1553040f27feb3b93656b6518824a2f219c296e41f
- MD5 8539f7918abbac14ab9aa9104293cab1
- SHA1 256d62ba039e2205c443ccdf82563380521461dd
- SHA512 496763005d5332711807abbac14a9fcb1185c2a65483f53196214827d01910847b39980dbe499f016f94cc35cd2ba201c98d361c842589c4d35e1f7b6c4d9399
- TLSH T15A0147256808095AA713183CDDFA72046A3D7E2B64FD3524F7DD52806F520F6D1B9D2D
- MD5 SHA1 SHA512 TLSH
examples/hello.st
- SHA256 aae468df9df71065f11b2fbfc62aa87be7e4f71e1597ba1bc9941556848647ff
- MD5 7281093180a0080712b84daa57795a25
- SHA1 72235fe16446d9aff5030e0af95ac5dcfd5da585
- SHA512 d9bc63adab6b6bd4227d30f2d8dc05a7672d21d26fdbc18ad40e6b935995713c9e0ab943ce135cb52729fb40022d4da548c7b83dc945c5f3e3e98ab090fc913a
- TLSH T126A02220288000C88088C80AAC20B2CA0003EC3A2020300220000002FE802208002C8C
- MD5 SHA1 SHA512 TLSH
examples/range.st
- SHA256 95b379de09f0610d9ac16e1926d5a5b3974ec3474b16776b3135a497e7bca373
- MD5 bba4e752c1fdb29373663f6cacc87fe0
- SHA1 f524fc2b3b9737de846d0b35684a6539adb3c3a5
- SHA512 92e5fd06360d386931f81367ebb4cd585a456a029b802a1006c963d797984ff66741f410d2684ad8256fc1a0f9395c0cf653f841f052c1ee8ed74fc4d4280b0e
- TLSH T1D8E08C31A8880B36C20A0879C4C282209C1DBDFB9AD9F020F7BC8B007F4B5A1A0AF008
- MD5 SHA1 SHA512 TLSH
examples/sentinel.exe
- IMPHASH 7964f0c8a685da3ae3993b025c139c0c
- SHA256 a721912f1388dee0e7cc5bb3c9324573d7b508e455a3b7bcd417ecdbe26bad73
- MD5 901b45a4ebe6643efbafe11514e48e69
- SHA1 6d4c0c08f88bcc104046514d12e0b9d0f4000328
- SHA512 a12fe2195ef5578152e3ab4a1ebd2949f1574471368e6289749533abbfd98184f0cec722d5c5e63c27aba65ddd0abd5a43c3725ae70db71019aa5a25cb421377
- SSDEEP 393216://Uw1IFnEUTWnCJP7rb04PIW2Y6TeOzeOOCQaM7nhL+3mYUKYOPUZp1RbJXpggy8:XUnKUTWn6P701W2TPMThL1YUrEvsh
- TLSH T187485A43B2AA68CFDD1BD37C668F527163307C1651243E2BAA44DFB22D537C39A1AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5184
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
AdjustTokenPrivileges
CryptAcquireContextA
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegEnumKeyExA
RegGetValueW
RegOpenKeyExA
RegQueryValueExW
kernel32
AddVectoredExceptionHandler
AssignProcessToJobObject
CloseHandle
CreateDirectoryW
CreateEventA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateJobObjectW
CreateProcessW
CreateSemaphoreA
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FreeLibrary
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLargePageMinimum
GetLastError
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNativeSystemInfo
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetVolumePathNameW
InitializeCriticalSection
K32EnumProcessModulesEx
K32GetProcessMemoryInfo
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LocalFree
LockFileEx
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SearchPathW
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTextAttribute
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetInformationJobObject
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnlockFileEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
api-ms-win-crt-convert-l1-1-0
atoi
mbrtowc
mbsrtowcs
strtol
strtoll
strtoul
strtoull
wcrtomb
api-ms-win-crt-environment-l1-1-0
__p__environ
_wgetcwd
getenv
api-ms-win-crt-filesystem-l1-1-0
_findclose
_lock_file
_unlock_file
_wchdir
_wchmod
_wfindfirst64i32
_wfindnext64i32
_wfullpath
_wmkdir
_wstat64
_fstat64
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
_heapwalk
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
localeconv
setlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
acos
asin
atan
atan2
ceil
cos
cosh
erf
exp
floor
frexp
log
log10
log1p
log2
log2f
logb
modf
pow
round
sin
sinh
sqrt
tan
tanh
_fdopen
api-ms-win-crt-private-l1-1-0
__C_specific_handler
longjmp
memchr
memcmp
memcpy
memmove
strchr
strstr
__intrinsic_setjmp
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_assert
__p___argc
__p___argv
_beginthreadex
_cexit
_configure_narrow_argv
_crt_atexit
_endthreadex
_errno
_exit
_get_errno
_initialize_narrow_environment
_initterm
_initterm_e
_set_errno
_set_error_mode
_set_invalid_parameter_handler
abort
exit
signal
strerror
system
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vsprintf
_chsize_s
_close
_fileno
_get_osfhandle
_lseeki64
_open_osfhandle
_pclose
_setmode
_wfopen
_wopen
fclose
fflush
fgets
fputc
fputs
fread
fwrite
getc
getwc
putc
putwc
setvbuf
ungetc
ungetwc
fopen
_write
_read
_popen
_lseeki64
_ftelli64
_fseeki64
_fileno
_close
api-ms-win-crt-string-l1-1-0
iswctype
isalnum
isalpha
isdigit
islower
isspace
isupper
isxdigit
mbrlen
memset
strcmp
strcoll
strlen
strncmp
strncpy
strnlen
strxfrm
tolower
toupper
towlower
towupper
wcscat
wcscmp
wcscoll
wcscpy
wcslen
wcsnlen
wcsxfrm
wctype
_strdup
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_localtime64
_localtime64_s
_time64
_wutime64
strftime
wcsftime
api-ms-win-crt-utility-l1-1-0
qsort
rand
rand_s
srand
ole32
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
shell32
ILCreateFromPathW
ILFree
SHCreateItemFromIDList
SHGetKnownFolderPath
ntdll
RtlCaptureContext
RtlGetLastNtStatus
Name
.text
Size
47.3MB
Virtual Size
47.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
627KB
Virtual Size
627KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
7.6MB
Virtual Size
7.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
978KB
Virtual Size
978KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/14
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
9.2MB
Virtual Size
9.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
299KB
Virtual Size
298KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
308KB
Virtual Size
308KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/80
Size
109KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/91
Size
151KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/107
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/123
Size
520KB
Virtual Size
519KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ