Sinav2 0x74.zip
- SHA256 14867a6b0a7d8c33b54a4e16a172b90950ded1b657d7f5fab17fbf4e00d8d1d7
Behavioral task
behavioral1
Sample
Sinav2 0x74/SinaV2 Perm CRACKED.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
19 signatures
300 seconds
Behavioral task
behavioral2
Sample
Sinav2 0x74/SinaV2 Perm CRACKED.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
General
- Target Sinav2 0x74.zip
- Size 6.2MB
- Sample260722-wwcs7a1fkh
- SHA256 14867a6b0a7d8c33b54a4e16a172b90950ded1b657d7f5fab17fbf4e00d8d1d7
- MD5 c7fbf60867a84a864aedc37efe092aae
- SHA1 60ffa35464094a066e79afbd79a31204f8553f3f
- SHA512 3141c72168c0542d730237267ce631804a2d4cb6f542160f073e9e4ad16a362e2e6683345995cda60cbdfc62334952d7a5c188819faae5a9a7f683ba8fa00464
- SSDEEP 98304:szOq6pCoo70F4TPpTtuUTQ/YFucZwqT7LYaKcnM9RR+vTFD0QtBo/BOVzsZ2H65:Bpbo7i4TpRuUE/YFucG+KcMo9WOuwa5
- TLSH T13D6633F89668B637E497446E3B555D26F63C3EA38EF72D085013AF4620FB7602C84C66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Sinav2 0x74/SinaV2 Perm CRACKED.exe vmprotect - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Sinav2 0x74/SinaV2 Perm CRACKED.exe
File Explorer
-
Sinav2 0x74.zip.zip 6.2MB
-
Sinav2 0x74/SinaV2 Perm CRACKED.exe.exe 6.5MB
Sinav2 0x74/SinaV2 Perm CRACKED.exe
- IMPHASH 6335ba97a72be2c99ef5347b25dddb70
- SHA256 7240ce4c3b869ff8720eaf607a2d5104842b497c49968c4575440a7a6d8d9ace
- MD5 ab26ba4d210f0107e3380d65fdb418a0
- SHA1 7419ca49a03462d6efa0b3771a1bfcc92d8c2f4a
- SHA512 49eae569402fb1d816d9ab4b70f26afa029414bd47814b0388481ee36086f6c08a349cee78661a4dddaa09d5d80b7a103e6e52cd1690db7b276e22f98644183d
- SSDEEP 196608:qxIPv4fOyzx9YUyVKBsUA2BDFmmZmasVTBu:KIP1yzFzCIEm4dN
- TLSH T1D86623FE62483718C45A85745C33EC09B2FA651E4AF9D66EB5DBB6C07B9F810D902F02
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
10016505
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
kernel32
SleepConditionVariableSRW
FlsSetValue
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetCursorPos
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
advapi32
CopySid
shell32
ShellExecuteA
msvcp140
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
imm32
ImmGetContext
dwmapi
DwmExtendFrameIntoClientArea
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
crypt32
CertFreeCertificateContext
ws2_32
bind
shlwapi
PathFindFileNameW
psapi
GetModuleInformation
userenv
UnloadUserProfile
bcrypt
BCryptGenRandom
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_copy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-runtime-l1-1-0
exit
api-ms-win-crt-convert-l1-1-0
wcstombs
api-ms-win-crt-time-l1-1-0
_gmtime64
api-ms-win-crt-filesystem-l1-1-0
_lock_file
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-math-l1-1-0
_fdopen
api-ms-win-crt-locale-l1-1-0
localeconv
wtsapi32
WTSSendMessageW
Name
.text
Size
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
374KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1003KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.vmp0
Size
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.vmp1
Size
6.5MB
Virtual Size
6.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ