tabspace-1.1.7.zip
- SHA256 c772524ca760e3badf2dbc45bc7f7e41ed8466c0f03b921c61130a6a28a7de82
Static task
static1
Behavioral task
behavioral1
Sample
tabspace.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
tabspace.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target tabspace-1.1.7.zip
- Size 133KB
- Sample260804-ch3mxabc53
- SHA256 c772524ca760e3badf2dbc45bc7f7e41ed8466c0f03b921c61130a6a28a7de82
- MD5 d7623af688d4e307ebcd0ecf6945e69c
- SHA1 783e6e54c97e70a8454cfe5d61eed616b0af9782
- SHA512 d4caa8e05344f555c693046aaefaf0b1b1c16ee9b6fad7f381b7d3e8111711257efb02ab12f773773ccbf7d9138aca26120b96d5b4bbdd76bba34eb0dc12a874
- SSDEEP 3072:LTMS2L6BClj98zyXvZ7g5OB85Xdlr/mCyg3lTqacQ1r0fT:LTMrU0jazyXq5OO5XdlT8O5hAT
- TLSH T1FCD312E88D211457A2ADC7FCB16A29D6AC86C65762CA8E3E470D441A3D63CC78C2731E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
tabspace-1.1.7.zip.zip 133KB
-
tabspace.exe.exe 244KB
tabspace.exe
- IMPHASH 12a5089bf53802c190c0d893d3d0555e
- SHA256 0c52fc98a980588fc43819c4fc383bcc691c64c6d8b655bdd5237a3bde4c2cdf
- MD5 a0614b526c1f37ecaf72d378c15d7928
- SHA1 6c0708fb553137b1effb89a558aa024bca15f720
- SHA512 379a92ff6629f1472a6ab5cb23400bafe70193734d0da538b4d65fd6addd489d4d66cbe169d46f45a256d8c83a6d9e30b53faa0dce217e327b02c15e3f17f2e7
- SSDEEP 3072:Amtpe1xarTFnIvz/v1HDQ9rh3GIyMZbKbNN6Cid/VuAg0FujT2KzVLx11zmB1820:AmaGKHp09r1GmZ2b7U/cAOZjxm78dV
- TLSH T16D346C11B5D18432D4B315320AE8EBB65A3EB9304B6199EF67D40F7E4F307C1AA70B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
90:08:29:cb:46:f5:9a:c6:53:03:ce:e4:d1:cb:30:70:b4:52:fb:ac:95:86:f8:aa:ba:5c:dc:72:31:1e:af:bf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Stefan KUENG,O=Open Source Developer,L=Altstätten,C=CH,1.2.840.113549.1.9.1=#0c15746f72746f69736573766e40676d61696c2e636f6d
Chains
Oct 11, 2022
CN=Open Source Developer\, Stefan KUENG,O=Open Source Developer,L=Altstätten,C=CH,1.2.840.113549.1.9.1=#0c15746f72746f69736573766e40676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Stefan KUENG,O=Open Source Developer,L=Altstätten,C=CH,1.2.840.113549.1.9.1=#0c15746f72746f69736573766e40676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Stefan KUENG,O=Open Source Developer,L=Altstätten,C=CH,1.2.840.113549.1.9.1=#0c15746f72746f69736573766e40676d61696c2e636f6d
Serial Number
15:7f:6d:9d:45:2a:2a:e3:34:ca:43:48:d1:e2:65:f0
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 12, 2023
Minor OS version
0
Major OS version
6
Entry point
49466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Development\stexbar\Misc\tabspace\bin\Release\Win32\tabspace.pdb
kernel32
CreateFileW
CloseHandle
GetCurrentDirectoryW
Sleep
LocalFree
WriteFile
GetFileSizeEx
GlobalMemoryStatusEx
ReadFile
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
GetFileAttributesW
WriteConsoleW
HeapSize
ReadConsoleW
GetProcessHeap
SetEnvironmentVariableW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FindNextFileW
FindClose
GetLastError
FindFirstFileW
FindFirstFileExW
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetCommandLineA
HeapFree
HeapAlloc
GetFileType
shlwapi
PathIsDirectoryW
Name
.text
Size
160KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=30795,
count=170, id=261, version=30795,
count=17, id=260, version=31616,
count=21, id=259, version=31616,
count=84, id=261, version=31616,
count=24, id=260, version=30795,
count=1, id=262, version=30795,
count=19, id=257, version=30795,
count=138, id=1, productName=Unmarked objects,
count=8, id=265, version=31630,
count=1, id=255, version=31630,
count=1, id=151,
count=1, id=258, version=31630,