screen-melter_x64_v1.4.0.zip
- SHA256 bef3d156268cebe5d39c8700cf74921300527c2c5cf1d7a54996e1e56d343ca6
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LICENSE
Resource
win10v2004-20260513-fr
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
LICENSE
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
screen-melter.exe
Resource
win10v2004-20260513-fr
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
screen-melter.exe
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
0 signatures
150 seconds
General
- Target screen-melter_x64_v1.4.0.zip
- Size 148KB
- Sample260802-pbrchshg49
- SHA256 bef3d156268cebe5d39c8700cf74921300527c2c5cf1d7a54996e1e56d343ca6
- MD5 a1cbec42f4afd42d37e004c75729b672
- SHA1 f32536995bea541b91013332dbf7f68fe0fb280d
- SHA512 5b09a6498ce1fd60a8ba06667e24ae6ef2ca1d47fe5b974479fb9703d690f242d769a35d26e52bedbe27f1ec0e54d4a85c7ccc9c18925f0c14a03c8966ca0c6c
- SSDEEP 3072:Ulf8cK5uhIPlyMsDeRk1WKgVfsoktBmendvdZG1N:yt3ElqeRkIKCfsoxEm1N
- TLSH T10CE312FC973338A9D930DE7B918E9534A095D5B82A310B7C4425AF1E19EBEF8D8401D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/screen-melter.exe
File Explorer
-
screen-melter_x64_v1.4.0.zip.zip 148KB
-
LICENSE1KB
-
README.md2KB
-
screen-melter.exe.exe 383KB
LICENSE
- SHA256 1ad5d6d292280cabf16c45f4ea624973efd7a7d6b0c7f0ed9c0effd2e98dfd01
- MD5 74e9b56817b0fbac4f8607102d107e01
- SHA1 347b4f39bfdc946886eac4f27724023258e5d935
- SHA512 57baa145675aebd11fca1b0c9d0a90693ae2c8970f2d337fd07a571129e9a2fba84193a5cb73a4e9740eb45813d35ad38f9e719e48f55122ddd83f0dc7c3c0e1
- TLSH T13611B61E7295036328821B600678ECC5F12BB15A7F6B1980306EF2051326018C9FFCA4
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 ed838e036e5cf23ba9541bc40ecaac91fdf5ff17fcc6d3056aa84059c0387b21
- MD5 d4aec30c949ae26bc61bdc708b1e55c2
- SHA1 e8ec5766685aa7be49dece2b1f05c7082c062872
- SHA512 c7b591c826801a152638bd2596118df9c2c55b1726421b5422049523f216854c76e686530b564bc778fe50077fc48d48822e017530d8592b4e32d6f83baaafab
- TLSH T1F241506C9C3FB1121AFBC36FB7C25DC7FB09394C85857065B88C04A80713684529E697
- MD5 SHA1 SHA512 TLSH
screen-melter.exe
- IMPHASH ec871973221f5d4ba74fd817b3691e29
- SHA256 2bfeb5402da2707696845696a2effa3eb87506319a9f483f8ab2709a62d7e9c4
- MD5 bee578cb796568df6006f4efaa350338
- SHA1 e9a17194f48c95f15315187029f8d72805d640c1
- SHA512 87bc1661b155b009738f2e91dea75b63dd50ea0dc5dc4ef6111f0b75316b706dad444238825ad5cadeae838de674dc1df9a0a858a897507cb38dd586047f3818
- SSDEEP 3072:k/kTGYGO4D8LqvfctxYwWd7mKsiRQ4QQbai10L9Ecj/U0OTJVqMG2Wf2zhe7XX6L:kcSILIf2xa7wiRQ4yi16lUVTPGezg7
- TLSH T1D2841863D6982DECC1ABA27C5B7B5941E77A78071361CACF13D085213E5B2C1BE3AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
243124
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\CPP\screen-melter\bin\Release_x64\screen-melter.pdb
kernel32
GetTickCount64
Process32NextW
Process32FirstW
CloseHandle
CreateProcessW
FormatMessageA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
CreateToolhelp32Snapshot
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
WideCharToMultiByte
MultiByteToWideChar
GetFileInformationByHandleEx
CopyFileW
TerminateProcess
OpenProcess
GetCurrentProcess
GetCommandLineW
GetProcAddress
GetModuleHandleW
GetLastError
AreFileApisANSI
GetTempPathW
GetLocaleInfoEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
Sleep
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
SetFileInformationByHandle
LocalFree
user32
SetTimer
DispatchMessageW
ShowWindow
GetSystemMetrics
PostQuitMessage
KillTimer
PeekMessageW
CallNextHookEx
SetCursorPos
GetDC
DestroyWindow
DefWindowProcW
SetWindowsHookExW
RegisterClassW
ReleaseDC
MessageBoxA
SetThreadDpiAwarenessContext
CreateWindowExA
TranslateMessage
ValidateRect
LoadCursorW
LoadIconW
ShowCursor
gdi32
BitBlt
advapi32
GetUserNameW
shell32
CommandLineToArgvW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?good@ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Xbad_function_call@std@@YAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Query_perf_counter
_Thrd_join
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exceptions@std@@YAHXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Winerror_map@std@@YAHH@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
__C_specific_handler
__current_exception
__current_exception_context
_purecall
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memchr
memmove
memcmp
__std_terminate
api-ms-win-crt-stdio-l1-1-0
fflush
fclose
fgetc
fwrite
fgetpos
setvbuf
__p__commode
_get_stream_buffer_pointers
_set_fmode
_fseeki64
fread
fsetpos
ungetc
fputc
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
_callnewh
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-runtime-l1-1-0
_errno
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
terminate
exit
__p___argv
_beginthreadex
_exit
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_invalid_parameter_noinfo_noreturn
abort
_configure_wide_argv
api-ms-win-crt-string-l1-1-0
_wcsicmp
isprint
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-convert-l1-1-0
strtoll
strtold
api-ms-win-crt-environment-l1-1-0
_dupenv_s
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
251KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=33731,
count=10, id=260, version=33731,
count=34, id=261, version=33731,
count=6, id=257, version=33731,
count=1, id=260, version=30795,
count=13, id=257, version=30795,
count=322, id=1, productName=Unmarked objects,
count=3, id=265, version=33811,
count=1, id=255, version=33811,
count=1, id=151,
count=1, id=258, version=33811,