10366.zip
- SHA256 f8406bd30f2787a1707a13e85c1bae90ac274fc090525c0f19511fa71622fb73
Static task
static1
Behavioral task
behavioral1
Sample
Env_DX8/GuardShield.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Env_DX8/GuardShield.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Env_DX9/GuardShield.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
Env_DX9/GuardShield.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
General
- Target 10366.zip
- Size 8.9MB
- Sample260724-w2dmnsab49
- SHA256 f8406bd30f2787a1707a13e85c1bae90ac274fc090525c0f19511fa71622fb73
- MD5 de8afd759178a81cf5cff9bfd8e1bc9c
- SHA1 61ce33c5aab5dfb0f98f36bf4a82b44d4b1d0668
- SHA512 f7501ffd9bbd401e95a5157281cb56da0347218cf7a0e04e6b278e9eaacc25f731d194b09224fa749c5b8f78e7a0ac37c8bd2c659a0888e431ade33057b8d8f2
- SSDEEP 196608:J+Zp7bNfUSEUHc6KzDxe+Zp7bNfUSEUHc6KzDxR:J+JfRL86KzE+JfRL86Kz3
- TLSH T1509633808E5099B69BFB2C414B45F06B53846B164075C60FEAF1A939FBDAFC266D303D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
10366.zip.zip 8.9MB
-
Env_DX8/GuardShield.dll.dll 4.5MB
-
Env_DX9/GuardShield.dll.dll 4.5MB
-
version.dat5B
Env_DX8/GuardShield.dll
- SHA256 4ff4b76dfa55141ff5cffde7133a732ea8a31151e70dc1910427585e02dda065
- MD5 ae73b225bfeadfa7e144a18c9ad13d0d
- SHA1 cc35717092385b088f2f40a83bf5a5b035ec7b6d
- SHA512 1de1709c83403e2fdc2ff67586bf016904d7dd2ec280cef6bf2475bf228da71f1d59178ca9d8b790d39f27b945e159d45f6574a45c3c436f5fcdf9d2b7602cdd
- SSDEEP 98304:9mNfVtjP3y2DW87JVXOm7D7nVW0odkgCKLjbhKoX3zxJQ7a:iVtjPCTUfOm7fVBtebjHzxC7a
- TLSH T1EA2633F4D8185CEAEA22EEF35E0114041A9CE84D4742D3A3E83F5E6D650AF1EEB77524
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
49:cf:cf:15:8e:c1:a1:3b:0f:07:da:e5:5e:45:71:74:a4:69:0e:95:97:c9:93:3d:ec:15:f3:5b:aa:5a:af:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Miguel Ugaz,O=Miguel Ugaz,L=Lima,C=PE
Chains
Dec 8, 2025
CN=Miguel Ugaz,O=Miguel Ugaz,L=Lima,C=PE
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Miguel Ugaz,O=Miguel Ugaz,L=Lima,C=PE
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Miguel Ugaz,O=Miguel Ugaz,L=Lima,C=PE
Serial Number
43:fc:02:7f:b8:62:88:0c:91:a5:11:f1:34:d8:18:5e
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 8, 2025 - Jul 8, 2026
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
5
Entry point
8204376
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Initialize
Name
Size
409KB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
156KB
Virtual Size
621KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
7KB
Virtual Size
277KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
467B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
701B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
37KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.exports
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.imports
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
FKU
Size
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=36, id=241, version=40116,
count=188, id=243, version=40116,
count=40, id=242, version=40116,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=207, version=50522,
count=27, id=259, version=26706,
count=1, id=28, version=9178,
count=1, id=18, version=8444,
count=67, id=29, version=9178,
count=8, productName=Unmarked objects (old),
count=121, id=261, version=26706,
count=36, id=260, version=26706,
count=368, id=1, productName=Unmarked objects,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=84, id=261, version=27054,
count=7, id=260, version=27054,
count=1, id=256, version=27054,
count=1, id=255, version=27054,
count=1, id=151,
count=1, id=258, version=27054,
Env_DX9/GuardShield.dll
- SHA256 4ff4b76dfa55141ff5cffde7133a732ea8a31151e70dc1910427585e02dda065
- MD5 ae73b225bfeadfa7e144a18c9ad13d0d
- SHA1 cc35717092385b088f2f40a83bf5a5b035ec7b6d
- SHA512 1de1709c83403e2fdc2ff67586bf016904d7dd2ec280cef6bf2475bf228da71f1d59178ca9d8b790d39f27b945e159d45f6574a45c3c436f5fcdf9d2b7602cdd
- SSDEEP 98304:9mNfVtjP3y2DW87JVXOm7D7nVW0odkgCKLjbhKoX3zxJQ7a:iVtjPCTUfOm7fVBtebjHzxC7a
- TLSH T1EA2633F4D8185CEAEA22EEF35E0114041A9CE84D4742D3A3E83F5E6D650AF1EEB77524
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
49:cf:cf:15:8e:c1:a1:3b:0f:07:da:e5:5e:45:71:74:a4:69:0e:95:97:c9:93:3d:ec:15:f3:5b:aa:5a:af:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Miguel Ugaz,O=Miguel Ugaz,L=Lima,C=PE
Chains
Dec 8, 2025
CN=Miguel Ugaz,O=Miguel Ugaz,L=Lima,C=PE
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Miguel Ugaz,O=Miguel Ugaz,L=Lima,C=PE
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Miguel Ugaz,O=Miguel Ugaz,L=Lima,C=PE
Serial Number
43:fc:02:7f:b8:62:88:0c:91:a5:11:f1:34:d8:18:5e
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 8, 2025 - Jul 8, 2026
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
5
Entry point
8204376
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Initialize
Name
Size
409KB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
156KB
Virtual Size
621KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
7KB
Virtual Size
277KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
467B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
701B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
37KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.exports
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.imports
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
FKU
Size
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=36, id=241, version=40116,
count=188, id=243, version=40116,
count=40, id=242, version=40116,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=207, version=50522,
count=27, id=259, version=26706,
count=1, id=28, version=9178,
count=1, id=18, version=8444,
count=67, id=29, version=9178,
count=8, productName=Unmarked objects (old),
count=121, id=261, version=26706,
count=36, id=260, version=26706,
count=368, id=1, productName=Unmarked objects,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=84, id=261, version=27054,
count=7, id=260, version=27054,
count=1, id=256, version=27054,
count=1, id=255, version=27054,
count=1, id=151,
count=1, id=258, version=27054,
version.dat
- SHA256 86566ae14b5da333a4fc8fb945d47167c26788e70cae37ffcb705f97132d9e2d
- MD5 ef3e86e4902558e3779ecc84d72a6d8c
- SHA1 eecad6986059de944831fdd07c89769989df7f81
- SHA512 a99fafba79c289bd3ed80a79ac11031e6ec756aa961db9cd3507bb45c9e4860346023536e47d43d2c3fa0a760dfd2ddd93714310033285a0d6a4c820d902e801
- MD5 SHA1 SHA512