Debug.7z
- SHA256 647fd930b6919a922a57855408c115b603078596933d9f10d098da263ec85120
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Debug.7z
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Debug.7z
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target Debug.7z
- Size 285KB
- Sample260722-1qs1fahn7v
- SHA256 647fd930b6919a922a57855408c115b603078596933d9f10d098da263ec85120
- MD5 070ce799b1dd22def0e27ecee1010f35
- SHA1 a7501f8e59853aadce0641b963dcaf7e156be997
- SHA512 2fde860cc9e57b5a719c886319ba960de30495200c7e4b626a16fe9f1d442e4211b71dfa4b1c64996fd45929b8f3f2a3b2dbf213ab813c4371012f846e78c07d
- SSDEEP 6144:pGYVZV90/rPULtHi235me+WEDO5yCPIO1Eu+q6vw+oLPvuUBtwz2S:pPZT0/LG+WEDOYCfF4vCLnnU2S
- TLSH T1705423FA369931DD6AEFF94678C1F16A9052CE34E11D12FE5CF21C09AB21043D479A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Debug/funny.exe
File Explorer
-
Debug.7z.7z 285KB
-
Debug/funny.exe.exe 129KB
-
Debug/funny.pdb1.9MB
Debug/funny.exe
- IMPHASH 10210a8a6638777a809c1ac6ca084e2d
- SHA256 416b4dfeba95a51ccdf44a0132a003300eaf11953badd5086665846a439fefc0
- MD5 523b5d43e8b18a4aa1c072d18939f9e5
- SHA1 bd3f00a28e2e7ec131bdd32998f90575dc8f6a02
- SHA512 f1081eb4cd5b83d39af45f48149b1cf798a4a35b8220b4bd153c91484c3bc448a5946b8b7337f2127904985a46810f1f4c8b5bd93b4fdb3f4ee0f8e4f810d1d1
- SSDEEP 1536:SoXOS76k6P3cbYOojovpFMQk1NA/v17TXPwcuOMMkDBmtWbhaohVzd:xuk6PUzA4FM/NA/xPwcuZBmtnyzd
- TLSH T1AED3C719336944B3D9B6C039EC82425ADCB17055177D99EF92018ED8AF32BECBA3CB51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
69722
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Monty\source\repos\funny\x64\Debug\funny.pdb
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
SetUnhandledExceptionFilter
RaiseException
IsDebuggerPresent
GetCurrentThreadId
GetProcAddress
GetStartupInfoW
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
InitializeSListHead
GetProcessHeap
VirtualQuery
FreeLibrary
GetConsoleWindow
Sleep
MultiByteToWideChar
Beep
user32
FindWindowW
FindWindowExW
GetDesktopWindow
SetClassLongPtrW
SetSystemCursor
LoadIconW
ChangeDisplaySettingsExW
SetCursorPos
EnumDisplaySettingsW
EnumDisplayDevicesW
SystemParametersInfoW
LoadCursorW
MessageBoxW
DestroyWindow
InvalidateRect
ReleaseDC
SetWindowLongW
GetDC
GetCursorPos
UpdateWindow
GetSystemMetrics
SendInput
keybd_event
VkKeyScanW
SetLayeredWindowAttributes
wsprintfW
SwapMouseButton
SendMessageW
CreateWindowExW
ShowWindow
gdi32
SetBkMode
SelectObject
DeleteObject
TextOutW
SetTextColor
CreateFontW
CreateSolidBrush
advapi32
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
ShellExecuteW
Shell_NotifyIconW
msvcp140d
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
_Query_perf_frequency
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
vcruntime140d
__vcrt_LoadLibraryExW
__vcrt_GetModuleHandleW
__vcrt_GetModuleFileNameW
__current_exception_context
__current_exception
__C_specific_handler_noexcept
__std_type_info_destroy_list
__C_specific_handler
_CxxThrowException
__std_exception_destroy
memcpy
__std_exception_copy
vcruntime140_1d
__CxxFrameHandler4
ucrtbased
_initterm_e
exit
_exit
_set_fmode
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
strcpy_s
strcat_s
__stdio_common_vsprintf_s
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_initterm
_crt_atexit
_crt_at_quick_exit
_wmakepath_s
_wsplitpath_s
_get_initial_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe
_CrtDbgReportW
_free_dbg
_callnewh
_beginthreadex
_time64
terminate
_CrtDbgReport
_calloc_dbg
srand
wcslen
wcscpy_s
_execute_onexit_table
_initialize_narrow_environment
malloc
Name
.textbss
Size
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.msvcjmc
Size
1024B
Virtual Size
625B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
373B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
979B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=259, version=35721,
count=11, id=260, version=35721,
count=30, id=261, version=35721,
count=6, id=257, version=35721,
count=13, id=257, version=33145,
count=132, id=1, productName=Unmarked objects,
count=1, id=261, version=36248,
count=1, id=255, version=36248,
count=1, id=258, version=36248,
Debug/funny.pdb
- SHA256 23a57ee6d274c860394df7949244009801a6f6eab75d6db950ee00d14d69ff9e
- MD5 7419c41e95f5a2a52f7677822756557c
- SHA1 882b1556a9a380b871771bf95bc2b8dc82c43cad
- SHA512 dc9e866479e97fbab144e4017709b6bbbb5311d34b270f117ce735b240f4195a8e3dbab89e3a4272b54c9399ccf55f67bf69f45d68d4c35d8ab4b900273cbb9f
- SSDEEP 49152:DgCWgM+5scHZpY435+fSnXu+g1+bs6qhhDOY3d+/wyVYuBSNOsfFvpjDJHTUdgWf:hw
- TLSH T196953972E661CD33C09E473EE04A170E63789F06EBCA77CB521AA1255DEE3149E2F641
- MD5 SHA1 SHA512 SSDEEP TLSH