25572476817.zip
- SHA256 5e02ee99f5e72425f0e809ae143d2da823f9e35af7b66b09300635b152c6cf10
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f5793a116c90c89af74798e93a35363e5ebe9a68c93278663eec8491edffc6a6.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
f5793a116c90c89af74798e93a35363e5ebe9a68c93278663eec8491edffc6a6.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 25572476817.zip
- Size 177KB
- Sample260729-tkrf4axdjb
- SHA256 5e02ee99f5e72425f0e809ae143d2da823f9e35af7b66b09300635b152c6cf10
- MD5 28fa40260cd775e06ce8a1e4aa6fbac8
- SHA1 e9e944c4242a847d527f680274f93219bc465356
- SHA512 dfec1e84f7a56b9378db7bbb7ae83fddc22cf476370bcea51f9b0029c6d1d1fa5070c9f6a119a64cd7a89aac2aad80241e0cb6d0ef04e8f87b384d80e0dd3bc3
- SSDEEP 3072:32e3yTAIZFwAebDqxvZ30Aepcbm6dOlAg8fn2Ffr+9Kj0O:GeiTAI/sDq5KAmcbmUIAiFfrJjN
- TLSH T16B041291B0BC5C4950C93BBE4D3D5AC9733A06FD4A09A4F8F861728EC9BC348BD98596
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f5793a116c90c89af74798e93a35363e5ebe9a68c93278663eec8491edffc6a6
File Explorer
-
25572476817.zip.zip 177KB
-
f5793a116c90c89af74798e93a35363e5ebe9a68c93278663eec8491edffc6a6.exe 656KB
f5793a116c90c89af74798e93a35363e5ebe9a68c93278663eec8491edffc6a6
- IMPHASH 9f7b0d06aa1667886a36a9985ba01d0b
- SHA256 f5793a116c90c89af74798e93a35363e5ebe9a68c93278663eec8491edffc6a6
- MD5 a5a6a5c4840b8134c81671c6a4e50f6a
- SHA1 0ae38a1e70c08b2a7c1f85f359014558671a94f6
- SHA512 2c2601fa273e50a6711ef0c9baee9b88e1de06404ce7c12ae4b19f61aec55b4fbb26883b22cbe09136c69ff9d90bd1e25548487e9f87097d62631b9a9f9eb9e8
- SSDEEP 6144:B12UdfHkDSdefEvAxa1snobprfkj3d5Qz1zAyN0Pf2XSvR:r24V4Va2noNE3Uzfl0
- TLSH T1ADE455E91650BCD6DF209BF4E881E52480693DD0B9F45AC35A7B7DDA3E35E007329E28
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
2
Major OS version
5
Entry point
116736
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
FillRect
SetWindowPos
GetWindowRect
MonitorFromWindow
GetMonitorInfoA
GetSystemMenu
GetWindowLongA
IsZoomed
SetMenuDefaultItem
TrackPopupMenu
PostMessageA
CallWindowProcA
SetWindowLongPtrA
SetMenuItemInfoA
GetClientRect
MessageBoxW
MessageBoxA
ExitWindowsEx
EnumWindows
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
GetWindowThreadProcessId
MonitorFromPoint
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegGetValueA
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
GetHGlobalFromStream
CoUninitialize
kernel32
GetStringTypeA
LCMapStringA
SetStdHandle
WriteConsoleA
InitializeCriticalSectionAndSpinCount
HeapReAlloc
QueryPerformanceCounter
GetTimeZoneInformation
GetStringTypeW
HeapCreate
HeapSetInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetHandleCount
DeleteCriticalSection
GetConsoleMode
GetLocaleInfoA
CompareStringA
CompareStringW
SetEndOfFile
LCMapStringW
GetExitCodeThread
GetConsoleCP
GetModuleHandleW
HeapSize
FlsAlloc
GetCurrentThreadId
GetLastError
CreateFileW
SetFilePointer
WriteFile
ReadFile
GetProcAddress
LoadLibraryA
GetUserDefaultLCID
CloseHandle
CreateFileA
CreateDirectoryA
FlushFileBuffers
WriteConsoleW
GetFileType
GetStdHandle
GetLongPathNameW
ExitProcess
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
MultiByteToWideChar
AreFileApisANSI
FindFirstFileW
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetWindowsDirectoryW
SetHandleInformation
CreatePipe
GetShortPathNameA
GetModuleFileNameA
GetShortPathNameW
GetModuleFileNameW
GetCurrentProcessId
GetLongPathNameA
FoldStringW
GetWindowsDirectoryA
GetEnvironmentVariableW
GetEnvironmentVariableA
GetTempPathW
GetTempPathA
GetTempFileNameA
GetFullPathNameW
GetFullPathNameA
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcessHeap
WaitForSingleObject
CreateThread
GetConsoleOutputCP
DuplicateHandle
GetCurrentProcess
SetEnvironmentVariableA
CreateProcessA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetVersionExA
SearchPathA
GetSystemTimeAsFileTime
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
Sleep
GetMailslotInfo
CreateMailslotA
GetCommandLineW
CreateSemaphoreA
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalUnlock
GlobalSize
GlobalLock
GetTickCount
AllocConsole
GetModuleHandleA
LoadLibraryExA
SetEnvironmentVariableW
SetCurrentDirectoryW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlUnwindEx
CreateDirectoryW
RemoveDirectoryW
HeapAlloc
HeapFree
DebugBreak
GetCommandLineA
GetStartupInfoA
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_installImpl
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_setWindowBackground
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_showWindow
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_uninstallImpl
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_updateFrame
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_registryGetIntValue
Name
.text
Size
202KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
367KB
Virtual Size
367KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=150, version=20413,
count=171, id=131, productName=VS2008 build 21022, version=21022,
count=13, id=149, productName=VS2008 build 21022, version=21022,
count=1, id=110, productName=VS2005 build 50727, version=50727,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=198, id=1, productName=Unmarked objects,
count=89, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 build 21022, version=21022,