file_c4d2198eada74c63869d2292fd43f5af_2026-07-16_05_41_26_299000.zip
- SHA256 6c715458cdfc3ea05fd7f5b8493ae0ed96074861c081cc1e1e3a884ccfb66310
Static task
static1
Behavioral task
behavioral1
Sample
entry_1_0/TeraCopy.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
entry_1_0/TeraCopy.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target file_c4d2198eada74c63869d2292fd43f5af_2026-07-16_05_41_26_299000.zip
- Size 3.3MB
- Sample260716-ghctpsd14p
- SHA256 6c715458cdfc3ea05fd7f5b8493ae0ed96074861c081cc1e1e3a884ccfb66310
- MD5 0a228f6abb133fd011cf3974ce065852
- SHA1 343ef56fe3e9ecc757ee192759561897d65c2e33
- SHA512 c74de7146f1ff6436323bb5164093a026c3804f73c941b330ba722ab26348ddaac2d39ee81ff2180f407c717d3436505011a6f96fbf6b50490e00310bfb1f304
- SSDEEP 98304:uuCug3S4zv8a1LPeoBwXuXyKL0C4Itvv/5VQ5QjavnbS:udnfz0OSXurp7tH/5VOfbS
- TLSH T100F533691520AA3C0FD9D8218CD8ADB534450BD350B36E98F1AAB7A0D5731AD73DE0EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
file_c4d2198eada74c63869d2292fd43f5af_2026-07-16_05_41_26_299000.zip.zip 3.3MB
-
entry_1_0/TeraCopy.exe.exe 4.6MB
-
manifest.json340B
-
script_output.txt340B
-
stdout.txt625B
entry_1_0/TeraCopy.exe
- IMPHASH 131e7c11bf57cc046755bc4dce24cb38
- SHA256 4f4e3c5d265c7350d56638be72413e62a0d48a94411da68836dd630e1e61391c
- MD5 0599e55c4eb4729fa508e2a1ef36ba2a
- SHA1 12635b1ccbec25c75d858c1729240e1cef8f60bf
- SHA512 0078aeffb216a26737271eed570917d01f1ea437cbb27872ef9f633cc5cbb03c4022349547b4190c106001db5c79320970749b67f54154ca593c42f595c30537
- SSDEEP 98304:n8f+vVySEThuy1XPIANOXWfykJ0IEEf7NtdRM5mjaL5XY:n82E9TQwcXWvL9fBtdROBXY
- TLSH T13926E164EB05DD78E14EF074E1324069A472BC3216E3442FE03FBD2BE5B6A519FE9618
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
de:7a:b8:b3:86:af:70:30:cb:38:5f:a5:a2:98:e8:1c:e7:b2:25:00:5b:2f:a7:44:d4:25:97:93:a8:a5:1b:b4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=CODE SECTOR PTY LTD,O=CODE SECTOR PTY LTD,ST=Queensland,C=AU
Chains
Dec 3, 2023
CN=CODE SECTOR PTY LTD,O=CODE SECTOR PTY LTD,ST=Queensland,C=AU
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=CODE SECTOR PTY LTD,O=CODE SECTOR PTY LTD,ST=Queensland,C=AU
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=CODE SECTOR PTY LTD,O=CODE SECTOR PTY LTD,ST=Queensland,C=AU
Serial Number
c6:d6:7f:2f:dc:eb:01:65:5d:21:83:f0:49:ca:f6:e8
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 17, 2023 - Nov 16, 2026
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
9610408
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
shell32
PathMakeUniqueName
kernel32
GetModuleHandleA
advapi32
RegOpenKeyExA
user32
ValidateRect
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
Size
Virtual Size
6.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
Virtual Size
713KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
189KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
113B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
Virtual Size
656B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
109B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
255KB
Virtual Size
254KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
211KB
Virtual Size
210KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
manifest.json
- SHA256 5886e0c82a0476fbbe56efe9c471d36f0557c1d9e5970dbec854a0bcc8f25bc1
- MD5 d893dd5eb28179a7acd402e9ddd6b972
- SHA1 6809b2f0cc6a3d71a1c5b5a979716c31aaa77b11
- SHA512 7e2a20ef5e71ea6970f82058a8d97f8c223302e3cd4d45f1bd74b746e427d32673c599c44e437d21142c83e5407ae507ab73fcc59913faaf40621f676acafe39
- TLSH T10BE0263D9432C04B69E4FBD606034AD3968180EC1F90C95323CCA75ED284E30485B0B3
- MD5 SHA1 SHA512 TLSH
script_output.txt
- SHA256 5886e0c82a0476fbbe56efe9c471d36f0557c1d9e5970dbec854a0bcc8f25bc1
- MD5 d893dd5eb28179a7acd402e9ddd6b972
- SHA1 6809b2f0cc6a3d71a1c5b5a979716c31aaa77b11
- SHA512 7e2a20ef5e71ea6970f82058a8d97f8c223302e3cd4d45f1bd74b746e427d32673c599c44e437d21142c83e5407ae507ab73fcc59913faaf40621f676acafe39
- TLSH T10BE0263D9432C04B69E4FBD606034AD3968180EC1F90C95323CCA75ED284E30485B0B3
- MD5 SHA1 SHA512 TLSH
stdout.txt
- SHA256 726df47a49a23dfafdc823a8eb1c2e9f652c757209fbe6465c8be62ec96c0b7d
- MD5 287f5a806331f7e0ac097452e574d64c
- SHA1 313d9a84916e8ed3dccdcdbc28e6ece810d40a48
- SHA512 20225bc4eb7bd17b7e03a51a5422d3ede275ed807b6de246b0df322bfcba42af9bdf31ddb94cb086ab08aed6857d102cef383f3c8e0d009ca3cbd09b774b89ff
- TLSH T1B6F099351EA26714570201C5066DC697C6D4E52822FCC2A8F8FC428ECE41FEEC2F8A24
- MD5 SHA1 SHA512 TLSH