WEB5.exe.zip
- SHA256 9e2fb92482bb5a45e5be330c3fe8d39b2d6ef6885380a6329b95cf62032bbba7
Behavioral task
behavioral1
Sample
WEB5.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target WEB5.exe.zip
- Size 1.7MB
- Sample260722-pedwlaef38
- SHA256 9e2fb92482bb5a45e5be330c3fe8d39b2d6ef6885380a6329b95cf62032bbba7
- MD5 3533af6e92aaf2a892804d64bf934fb1
- SHA1 bdb7e256ecab88a7936ddedb1b3f174936c08421
- SHA512 ad39489d9ad80f376a15abe6933c9aaa2682dd28c518fb52e16ffc999bf2c632980537e827ee262d9bbf41c2e7503dc5a6da05c9bf3ecb45ca52856109c4d1c9
- SSDEEP 49152:jA0W5eBBkQ9cetYLNxQH8XJvSa3nZMukX1:svF9L0H8XJDnGzF
- TLSH T1C885333AE40B15D9CB22AD950C677E66C002881BF978259063C94B8D3DEF5A5FFC21F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/WEB5.exe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/WEB5.exe unpack002/out.upx
File Explorer
-
WEB5.exe.zip.zip 1.7MB
-
WEB5.exe.exe 1.7MB
-
out.upx.exe 2.1MB
WEB5.exe
- SHA256 b9996038636ae80e2465093d3822cd98b0507c321e4573fd7622cf68a4d2bbf6
- MD5 72425f45c5e98c118c166264ae411c78
- SHA1 d911c6b00d3c19edae3a9c84efcdec2020d065b8
- SHA512 df5be2b53c843b16d83377b6bea50623df744dad8361896c88172c5d40a6edbad4fc282a76033d7351a33e4a9118cee62c84f4a95faf3714a5c006ad1bd9f981
- SSDEEP 49152:INtl6cgY59yGPy3+O7nIPv/FM1sLB9AaLM91ILBUWrbFFZH:INL6crcmOLIPHmWzLM9SUiBFZ
- TLSH T1BE8533698101D462E08E6C34513B6AF13E082E634F5574236E66EBCEFE752C1FB9361B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2511504
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
708KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
27KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=5, id=12, version=7291,
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=44, id=19, version=8022,
count=44, id=14, version=7299,
count=2, id=93, version=2179,
count=694, id=1, productName=Unmarked objects,
count=29, id=19, version=8034,
count=1, id=18, version=8444,
count=117, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=216, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=89, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=91, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
out.upx
- SHA256 b38275a84c6775c016e15bb9a16f24267c150a86be26e9a0ed6da805b339529c
- MD5 d53b768d68c54d7b78d2afc5f669b183
- SHA1 718fc2e4f8641d6ca6bdaf058f4a783349cc6118
- SHA512 692526c20ccd3df7a4bde33b432a17a96579562aad21a150312adc522f600f8b13e61cc4b7578ccab7d840efcda2d1756fbb778b67f6909d44253604f26e69a6
- SSDEEP 49152:YulZWu48HAeuxDjVkr3+QeL8Y7bNsqGawAbJEcV:NfWu4bxPpQeLTNsHAbJE
- TLSH T155A5E122F55180B3D15A1170057B173AEE7997560A30CF8BE798DDBA7F32260BF2A11E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
555821
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
668KB
Virtual Size
667KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
92KB
Virtual Size
343KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=5, id=12, version=7291,
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=44, id=19, version=8022,
count=44, id=14, version=7299,
count=2, id=93, version=2179,
count=694, id=1, productName=Unmarked objects,
count=29, id=19, version=8034,
count=1, id=18, version=8444,
count=117, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=216, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=89, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=91, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,