3D_Pipes.zip
- SHA256 4ffcc9bd9ef9bcba990caec3463e2e4a1d4515d9e72f8745aea592e0fa26fa6b
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3D Pipes.scr
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
3D Pipes.scr
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
29 signatures
150 seconds
General
- Target 3D_Pipes.zip
- Size 251KB
- Sample260718-tmx2naft4l
- SHA256 4ffcc9bd9ef9bcba990caec3463e2e4a1d4515d9e72f8745aea592e0fa26fa6b
- MD5 5e59b9a2743207456611c2581d5e1cf3
- SHA1 0416b822072370152d3239ef1c13dff578ae33d6
- SHA512 72d15fa49cb6fa5a1052844fb0757150b4545171a4fce432ab38a6c715a1fe63dc49afa754e2ccdfc728bd87ead52ca2726a33e5a18f2b99d3664b0dac640060
- SSDEEP 6144:s+SLjbOr24L+QiPnm49npNpDbnNY32LnH/sLdf3ywA6Dv5G:syKPm49n93nZgR3yxyxG
- TLSH T1A0442382FE5F66ED24002C1B37926B1E12DC2E40E272AD83BFDF4418A54565E7CE7E91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3D Pipes.scr
File Explorer
-
3D_Pipes.zip.zip 251KB
-
3D Pipes.scr.exe 596KB
3D Pipes.scr
- IMPHASH be549f1f092af1ba66eb04e8a18b62f3
- SHA256 664b4b1da036eb36b13a3bce2fd572e37127223cbf6796adde12cbfb3af0d893
- MD5 d5b0ed8eca34f8480e555f47269ab0ba
- SHA1 39dcb05cabbd45e92b631022a744dd5dbfa4a0cb
- SHA512 ea19ec6b93e87494b94cd80ed455f7294dce9d23f79c87d1f5a02a144e9bd8d1accfc8bd1f7162f89b86cb8cba21b7b8b4822cbe5dc563dd35aedb4118a56ec7
- SSDEEP 12288:Cl4NXaEeTdbbTxKAWFhBJ8Q0oZyltDqlFGhoZ0joAF:M2aEeTd9KAWFhBJ8Q0aSqlFl00A
- TLSH T108D49C207890C035C8E362B0C65EB63D61BDBE91472646DB1AC837FB9E70BD9563538B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
66729
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
sspipes.pdb
advapi32
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyA
RegQueryValueExA
kernel32
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetTimeZoneInformation
HeapFree
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentProcessId
HeapCreate
GetPrivateProfileIntW
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindFirstFileW
HeapDestroy
GetPrivateProfileStringW
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualFree
GetPrivateProfileSectionW
IsBadCodePtr
IsBadReadPtr
GetWindowsDirectoryW
lstrlenW
lstrcpyW
Sleep
LocalAlloc
LocalFree
DebugBreak
IsProcessorFeaturePresent
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileA
CreateFileW
CloseHandle
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
GetModuleHandleW
lstrcatW
FreeLibrary
LoadLibraryW
GetCommandLineW
SetThreadPriority
GetCurrentThread
GetVersionExW
QueryPerformanceFrequency
RaiseException
HeapSize
user32
wsprintfW
PeekMessageW
DialogBoxParamW
CheckRadioButton
GetDlgItem
EnableWindow
IsDlgButtonChecked
SendMessageW
SendDlgItemMessageW
EndDialog
LoadStringW
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetRectEmpty
EnumDisplaySettingsW
UpdateWindow
SetRect
InvalidateRect
ScreenToClient
DrawTextW
FrameRect
FillRect
MessageBoxW
SetWindowPos
GetWindowTextW
CheckDlgButton
SetWindowTextW
GetClientRect
CreateWindowExW
AdjustWindowRect
RegisterClassW
LoadIconW
LoadCursorW
PostQuitMessage
SystemParametersInfoW
SetCursor
ShowWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
DefWindowProcW
SetTimer
KillTimer
EndPaint
BeginPaint
UnionRect
comctl32
ord17
comdlg32
GetOpenFileNameW
gdi32
DeleteObject
ExcludeClipRect
GetStockObject
winmm
timeGetTime
d3d8
Direct3DCreate8
??0PrimProcessor@@QAE@XZ
??1PrimProcessor@@QAE@XZ
??4PrimProcessor@@QAEAAV0@ABV0@@Z
?AllocSpans@PrimProcessor@@QAEJPAIPAPAUtagD3DI_RASTSPAN@@@Z
?AppendPrim@PrimProcessor@@AAEJXZ
?Begin@PrimProcessor@@QAEXXZ
?BeginPrimSet@PrimProcessor@@QAEXW4_D3DPRIMITIVETYPE@@W4_RAST_VERTEX_TYPE@@@Z
?ClrFlags@PrimProcessor@@QAEXI@Z
?End@PrimProcessor@@QAEJXZ
?FillPointSpan@PrimProcessor@@AAEXPAU_D3DTLVERTEX@@PAUtagD3DI_RASTSPAN@@@Z
?Flush@PrimProcessor@@AAEJXZ
?FlushPartial@PrimProcessor@@AAEJXZ
?FreeSpans@PrimProcessor@@QAEXI@Z
?GetFlags@PrimProcessor@@QAEIXZ
?Initialize@PrimProcessor@@QAEJXZ
?Line@PrimProcessor@@QAEJPAU_D3DTLVERTEX@@00@Z
?LineSetup@PrimProcessor@@AAEHPAU_D3DTLVERTEX@@0@Z
?NormalizeLineRHW@PrimProcessor@@AAEXPAU_D3DTLVERTEX@@0@Z
?NormalizePointRHW@PrimProcessor@@AAEXPAU_D3DTLVERTEX@@@Z
?NormalizeTriRHW@PrimProcessor@@AAEXPAU_D3DTLVERTEX@@00@Z
?Point@PrimProcessor@@QAEJPAU_D3DTLVERTEX@@0@Z
?PointDiamondCheck@PrimProcessor@@AAEHHHHH@Z
?ResetBuffer@PrimProcessor@@AAEXXZ
?SetCtx@PrimProcessor@@QAEXPAUtagD3DI_RASTCTX@@@Z
?SetFlags@PrimProcessor@@QAEXI@Z
?SetTriFunctions@PrimProcessor@@AAEXXZ
?StateChanged@PrimProcessor@@QAEXXZ
?Tri@PrimProcessor@@QAEJPAU_D3DTLVERTEX@@00@Z
?TriSetup@PrimProcessor@@AAEHPAU_D3DTLVERTEX@@00@Z
Name
.text
Size
520KB
Virtual Size
516KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
40KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data1
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=8, productName=Unmarked objects (old),
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=164, id=1, productName=Unmarked objects,
count=76, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=110, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=132, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,