build.zip
- SHA256 6a61112bf0501c79ca965d90d9345ddaa65e9bc24b2db80ee0b30243ff7c588c
Password
dddd
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
build/executor.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
General
- Target build.zip
- Size 127.9MB
- Sample260720-xlltsact3q
- SHA256 6a61112bf0501c79ca965d90d9345ddaa65e9bc24b2db80ee0b30243ff7c588c
- MD5 f01302fe9e56a783aca43339cdd9b64f
- SHA1 950bf34073290f44f354c351b342644daedf5944
- SHA512 150de9e961c81ab6f0027e212114de009e2ba4e59c99c246b034b587a57b98ff7e686e6a07b855f3de7f35fdb50fe9b67f57b7d01173e51fdf1d6bab0d93f371
- SSDEEP 3145728:ank/RxYuVuQdQd3ZuA4QEGp10paiPznDsQOrMao9Rd:BphOpohgQpaiP7oQOoao97
- TLSH T1FC5833579DCC3A03E3B951FA230877866A6C02E23616F3D794322761D5A192497EFF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/build/executor.exe
File Explorer
-
build.zip.zip 127.9MB
-
build/assets/video.mp4128.0MB
-
build/assets/wallpaper.jpg.jpg 45KB
-
build/executor.exe.exe 48KB
build/assets/video.mp4
- SHA256 7b50182291ca5c261032836f281497bf10414c88d69fe4094b9013d6c18b7915
- MD5 f026953ae80f472a0b8fded8ce5d6e76
- SHA1 4747f358156d09c2b8e5ed8829ec81903004e601
- SHA512 7becce696e81bc0ed3468b0d7c010c889c105971a4148615243c0b8757f578f65ac2f6ea1984489f450b16ccd9bfba5d4cd39c4f0b0a257ab60e2632bcc872a6
- SSDEEP 3145728:+19dPg2XqKTOU9zKoIO26TSsl+W9NXqOmTgOOLTr:6l/Sw+PUzl+W9gOmcOOLn
- TLSH T1345833476F8C2103E3B953B513C523857A78C1A12717A3DB51722335EDA27289EDBBE2
- MD5 SHA1 SHA512 SSDEEP TLSH
build/assets/wallpaper.jpg
- SHA256 544b259283184d87f594da6e86b7bfcfe4a4a1ad7e2e4c4a3e387cffa9fbefde
- MD5 58705fe43430fe1121b891897fa63035
- SHA1 d62a29585ec5904b6907284d6aa34e078e526765
- SHA512 017c756410fd392fef7e73eb08ef027d1d8ddc64813744598758046aee8fa14e6696f491f355bd8309a4338336e1a7933fc162b5e320e10d6d2e9dcd438cc9c7
- SSDEEP 768:+oKEv2zpoIFTAhk1JHHHHQQPB00p0cXblQNFbePb7nkFXe8z7tN+e1Bqq777777f:+oKEQpoIFshxQBplQNwbTk9ye1BJ777z
- TLSH T16623CF53AA14E75BF36C5FBECA3CFC86F290B8C0537A9613E7146C21122B705682B9C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
dddd
build/executor.exe
- IMPHASH f8db7ee781fe5f0fdfdb5d052bee7b82
- SHA256 e0a82ea73b7e02b4d1de0ce2810b3d355a50f6b9027f5b823ae8208f9bfa6805
- MD5 1d0d3009055f12d72c2b556fe6e30d50
- SHA1 a708411a021e71674a3ff59701b7cc3df4dd318f
- SHA512 012a1012506f4ffcee600fdcf6c778690d6bada841a07ad1b8c758e1b548a8ebc37d53a1471c7a4f08183cdd7d9340af2d8e315c4d73c923c2323b24d17647cf
- SSDEEP 1536:D56nWb2y1TERXffEL2tHbo7ynDcQpdcYXh:DInWb2y1TuUQvTUc
- TLSH T10623E92ADD25906BD31ECD78C5434805DE63BC869BA1B9CBA7802DD70D75AD89F3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dddd
Minor OS version
0
Major OS version
6
Entry point
25008
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
user32
SystemParametersInfoW
UnhookWindowsHookEx
MessageBoxW
GetClientRect
UpdateWindow
GetSystemMetrics
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
gdi32
GetStockObject
msvcp140
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
kernel32
GetStartupInfoW
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
GetFileInformationByHandleEx
GetModuleHandleW
GetLastError
CloseHandle
AreFileApisANSI
CreateFile2
GetFileAttributesExW
FindFirstFileW
CreateDirectoryW
GetModuleFileNameW
LocalAlloc
LocalFree
FormatMessageW
FormatMessageA
GetLocaleInfoEx
FindClose
vcruntime140
_CxxThrowException
__current_exception_context
__current_exception
__std_terminate
__std_exception_copy
__std_exception_destroy
__C_specific_handler
memcpy
memmove
memset
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-heap-l1-1-0
free
malloc
_set_new_mode
_callnewh
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__stdio_common_vswprintf_s
__p__commode
api-ms-win-crt-string-l1-1-0
strlen
wcslen
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_seh_filter_exe
_set_app_type
abort
terminate
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_register_onexit_function
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configure_wide_argv
_initialize_onexit_table
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35721,
count=10, id=260, version=35721,
count=29, id=261, version=35721,
count=6, id=257, version=35721,
count=1, id=260, version=33145,
count=1, id=262, version=33145,
count=11, id=257, version=33145,
count=126, id=1, productName=Unmarked objects,
count=1, id=261, version=36248,
count=1, id=258, version=36248,