build.zip
- SHA256 8560ba446a1e1173836fd7b1dd25d9038896651a4a3f2bfa93c2d3f1d2be19b5
Password
ddddd
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
build/executor.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target build.zip
- Size 128.0MB
- Sample260720-xc7d5adv81
- SHA256 8560ba446a1e1173836fd7b1dd25d9038896651a4a3f2bfa93c2d3f1d2be19b5
- MD5 635319254f93c8629833c0d364feca46
- SHA1 9e9b45b17a67085bc94dd23e07396ac3c75a26ce
- SHA512 e43b280ee44d734fea571716576e78afc27c9fe394eb4f8664f2aeb90b8e88db0da513eaded480a2632e287ba2c39b214ec51be965b60160193695499b0f58e8
- SSDEEP 3145728:snk/RxYuVuQdQd3ZuA4QEGp10paiPznDsQOrMao9RL:nphOpohgQpaiP7oQOoao95
- TLSH T1B05833575DCC3903E3B951F6230877866A6C02E23A16F3D794322761D5A2A2497EFF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/build/executor.exe
File Explorer
-
build.zip.zip 128.0MB
-
build/assets/video.mp4128.0MB
-
build/assets/wallpaper.png128KB
-
build/executor.exe.exe 48KB
build/assets/video.mp4
- SHA256 7b50182291ca5c261032836f281497bf10414c88d69fe4094b9013d6c18b7915
- MD5 f026953ae80f472a0b8fded8ce5d6e76
- SHA1 4747f358156d09c2b8e5ed8829ec81903004e601
- SHA512 7becce696e81bc0ed3468b0d7c010c889c105971a4148615243c0b8757f578f65ac2f6ea1984489f450b16ccd9bfba5d4cd39c4f0b0a257ab60e2632bcc872a6
- SSDEEP 3145728:+19dPg2XqKTOU9zKoIO26TSsl+W9NXqOmTgOOLTr:6l/Sw+PUzl+W9gOmcOOLn
- TLSH T1345833476F8C2103E3B953B513C523857A78C1A12717A3DB51722335EDA27289EDBBE2
- MD5 SHA1 SHA512 SSDEEP TLSH
build/assets/wallpaper.png
- SHA256 c3ee247f2c34fc960e07e606bd624191da8d65c67d6792efc13d00d182a2548f
- MD5 5c51de27258c5eb76ffb63a3391868d2
- SHA1 6892732e874874a5a9d2754feadf040c175b2c9b
- SHA512 ef6043503dfa5bf6b1803f14d99073d1c6009a8a046c9cd4b34786fd1770a0a48a30c679af45047678be7488da24de8d5f5781aa6b2dbfa2e6277c362ca23304
- SSDEEP 3072:l8o/GKbxv6iBKfL/aPPHPAdYzHfutCkbI4Jd/ljEjrt78wZCH:P/G0LKjCPPvAdYqMkbnN0rt78PH
- TLSH T147D3125B9F8A1C1451FE02EA7466729342CCFEA97C39C58D3D94A0DF920F7B6193682C
- MD5 SHA1 SHA512 SSDEEP TLSH
build/executor.exe
- IMPHASH 5674afa42bb267c8ef3ac33bef8e13c6
- SHA256 129fb3d1bf171becec91f9ed9920a55dad6d07702e44586da4ed6ad4884b6234
- MD5 5a15ba036f80f5f9e0073f2ba52c2ff0
- SHA1 1c2d7d3df388e9a49174e04e389532c0e06b934b
- SHA512 3242265260b1a2b365daa8031d5e34896bc7ccaae500e78c2dd50fb156f71acbdee1b0a1cf6702e9a1044d2cc9696556b83c8f1fd5d3aefdf9d08941ed09f0ae
- SSDEEP 768:lD6sfT7TAPgv6NkCbHDUJdcmE7Gzlza3DYJJR/y5uNVRg4A5ny5hqIp:lD6sfTAYCNkCbHoJOn7GlbJRGuNVrA5c
- TLSH T1F023FA1ADD1A906BD31E8DB8C9534D05DF63BCC78B91B9CB97801DD60C76AD89B3E202
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ddddd
Minor OS version
0
Major OS version
6
Entry point
24544
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
shell32
SHGetKnownFolderPath
ole32
CoUninitialize
CoTaskMemFree
CoInitialize
user32
TranslateMessage
DispatchMessageW
SystemParametersInfoW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
UpdateWindow
GetSystemMetrics
GetAsyncKeyState
SetLayeredWindowAttributes
ShowWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
GetMessageW
gdi32
GetStockObject
winmm
mciSendStringW
msvcp140
?_Winerror_map@std@@YAHH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
kernel32
GetStartupInfoW
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
GetModuleHandleW
GetLastError
CloseHandle
GetFileInformationByHandleEx
AreFileApisANSI
CreateFile2
GetFileAttributesExW
CreateDirectoryW
GetModuleFileNameW
LocalFree
FormatMessageA
GetLocaleInfoEx
FindClose
FindFirstFileW
vcruntime140
__current_exception_context
__current_exception
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcpy
memmove
memset
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
_callnewh
free
api-ms-win-crt-string-l1-1-0
wcslen
strlen
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_set_app_type
abort
_crt_atexit
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_cexit
_register_onexit_function
_register_thread_local_exe_atexit_callback
_c_exit
terminate
_initialize_onexit_table
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35721,
count=10, id=260, version=35721,
count=29, id=261, version=35721,
count=6, id=257, version=35721,
count=1, id=262, version=33145,
count=13, id=257, version=33145,
count=120, id=1, productName=Unmarked objects,
count=1, id=261, version=36248,
count=1, id=258, version=36248,