25466765000.zip
- SHA256 60c4f7a6d99b0b4063791d731e7a191d9ad99f929f716c3a3b3c4c94a6411265
Static task
static1
1 signatures
General
- Target 25466765000.zip
- Size 129KB
- Sample260715-smrzzaav5t
- SHA256 60c4f7a6d99b0b4063791d731e7a191d9ad99f929f716c3a3b3c4c94a6411265
- MD5 2ff80559add2b23d3c79efe8f7bb64d6
- SHA1 37c11544bbeee896881e359a32863923b06d92ec
- SHA512 ecb3ad666c61251866e7affd0e8787124fc68f951be3431ea347ea71ecc61b7141388be979b3b269d69ba603dcce81b7ba1d01b21a2c8cf73619edd669552277
- SSDEEP 3072:Kuj4TdzXsUlTMlSgOTi04w+MKiEn9tlbPgPmmYxryRtNDy:+Td7lmSgh0NKDtPGgry31y
- TLSH T1F9D31203D701428F9F7C9E356D2F1D8E653C1882F9B0A7A1F99FBCC6E43A2954878611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fbdc3d332ae76ea3701afc24802c5ca1014aac2d29126fde6953e5eb70976a63
File Explorer
-
25466765000.zip.zip 129KB
-
fbdc3d332ae76ea3701afc24802c5ca1014aac2d29126fde6953e5eb70976a63.exe 228KB
fbdc3d332ae76ea3701afc24802c5ca1014aac2d29126fde6953e5eb70976a63
- IMPHASH b7ca6b45183e2d7f5e2302d2a4a7afbc
- SHA256 fbdc3d332ae76ea3701afc24802c5ca1014aac2d29126fde6953e5eb70976a63
- MD5 398ce6b3fae460a24c416b6ebf0bff2c
- SHA1 95f97fd665bd03d2d150e9d90b2a61b83479de89
- SHA512 9deb3289c301eb2e0a1498c2d448fc51ece8d7e45eef9a89a5eb9a3575e1016b4c880ab7c5da29bb604cc07fb36643ae2987ef4cacbef3e97c5a2f7334ba5c03
- SSDEEP 6144:EwML2S73GpyuHAAO2B/LuTfEfTvBCPaSLAOYPb:EwML/7WpyuHAAO2B/LXBN0M
- TLSH T1F2348D1135E2C8B2D573153509F4D7BA4A3EBD600F618EEBA3D45B3E9E302C19632E66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
35268
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
DispatchMessageW
DefWindowProcW
TranslateMessage
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
ShowWindow
UpdateLayeredWindow
SetWindowPos
SetTimer
KillTimer
PostQuitMessage
GetDC
ReleaseDC
InvalidateRect
ShowCursor
SetCursorPos
GetCursorPos
FillRect
PtInRect
GetDesktopWindow
LoadCursorW
EnumDisplayMonitors
GetMessageW
gdi32
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectObject
ole32
CreateStreamOnHGlobal
gdiplus
GdipCreateRegionPath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipRestoreGraphics
GdipSaveGraphics
GdipAddPathEllipseI
GdipDeleteRegion
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipBitmapGetPixel
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawRectangleI
GdipFillRectangleI
GdipDrawImageRectI
GdipSetClipRegion
GdipDeletePath
magnification
MagSetWindowFilterList
MagSetWindowTransform
MagSetWindowSource
MagUninitialize
MagInitialize
MagSetImageScalingCallback
kernel32
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
FreeEnvironmentStringsW
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
HeapSize
CreateFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
RtlUnwind
RaiseException
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetLastError
GetModuleHandleW
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
WideCharToMultiByte
WriteConsoleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetProcAddress
Name
.text
Size
142KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=26213,
count=164, id=261, version=26213,
count=21, id=259, version=26706,
count=23, id=260, version=26213,
count=61, id=261, version=26706,
count=33, id=260, version=26706,
count=13, id=257, version=26213,
count=166, id=1, productName=Unmarked objects,
count=1, id=261, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,