55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.zip
- SHA256 2d7b2edb20c9f7494df48f1952f9bee15e13f5feb3c6c35ba41a9d02c8e1ed7e
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral2
Sample
55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
120 seconds
Behavioral task
behavioral3
Sample
55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral4
Sample
55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
120 seconds
General
- Target 55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.zip
- Size 1.8MB
- Sample260718-bqbcysfv5v
- SHA256 2d7b2edb20c9f7494df48f1952f9bee15e13f5feb3c6c35ba41a9d02c8e1ed7e
- MD5 a07bf9d8f35416c60f9b6670350a6c94
- SHA1 725ed631f85531a1304084c9d6076446c162ffad
- SHA512 443a5b05af34db8465e4f3c7e27e8fd782341ab0ae24e9ef049e0453b29b5eb2e193c09ae3f9feff4d38f17f6779979146b4daba12b3e97da3b3c4c892cfeb68
- SSDEEP 49152:cinjTe3B5eD58m6Is/nQzz8JtzIexrFiLSwEr:ck3y5eD5/on4oJtUeejS
- TLSH T19E95333EE6F35A3F4B5532F89D58DA4DC85D3DE00812BCFE5D8A24A93880869B5548CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.exe
File Explorer
-
55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.zip.zip 1.8MB
-
55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.exe.dll 5.1MB
55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe.exe
- IMPHASH 0cdadfa1098d845dd3b4cf92625b5f04
- SHA256 55c28ae706e71466105213f097ade42c5022792c67dcfc29e354a1ade36fd4fe
- MD5 e904d175277278ea87b853235875fdc9
- SHA1 d917862e4dc8f55819dfde493322481bc9c58ef9
- SHA512 9ffcb88cc2c08746935d4b6ec3032be4f5afdba0c41088b11dfaf5c4b1dcffc79a8dcfce09c5f921bd75a93099c238692945d2e63a6f9a022d390dc5d2d15572
- SSDEEP 24576:jbLgKbLgdritdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+pSk+RdhAdmf:jnbn6MSPbcBVQej/1INRx+pARdhnvn
- TLSH T17936234D32AC81FCD107167494B7CE26F3B3BC6E22B95B0F9B5085761D03B96AB64B12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
5612
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA
GetCurrentThreadId
FlsSetValue
GetCommandLineA
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
TerminateProcess
GetCurrentProcess
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapFree
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
GetModuleFileNameW
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapSize
CreateFileW
FlushFileBuffers
PlayGame
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=83, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=9, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=80, id=1, productName=Unmarked objects,
count=23, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,