e6ecfde563694640.bin
- SHA256 925445c04d217cab3fe627f075f40b36cea928bbc19adf105f6a9766084c06d4
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Zeta_Software_4.4.3/Zeta_Launcher_v4.4.3.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target e6ecfde563694640.bin
- Size 1.8MB
- Sample260804-cneg9stwe1
- SHA256 925445c04d217cab3fe627f075f40b36cea928bbc19adf105f6a9766084c06d4
- MD5 dab9fc38527d9b9925a9e6e724b84c75
- SHA1 e419c122cef271fa1f3d9ba7153c6b772fcbb371
- SHA512 0c77d888f9a18bf9b691fe7e9e4ead5e2b3de019345313006728c1f7185e21855576d4b28f96d370cd2025cff5517ca810022778e482e1cf83dc682d421069e2
- SSDEEP 49152:9pU3lyVyzMYBUS+On+hfkygdG6zEW2Igwp:Q3WMqShlZRYW2w
- TLSH T1099533220A3D71F383EB4136E9F4B158AE062787698C2DFED053F71BC07861966661F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/Zeta_Software_4.4.3/Zeta_Launcher_v4.4.3.exe
File Explorer
-
e6ecfde563694640.bin.zip 1.8MB
-
Zeta_Software_4.4.3.zip.zip 2.6MB
-
Zeta_Software_4.4.3/Zeta_Launcher_v4.4.3.exe.exe 704.0MB
Zeta_Software_4.4.3.zip
- SHA256 e6ecfde563694640967e73ea2431ad61a07efd2b9cc682bf9d9a381dc96dad3e
- MD5 9e1c827a73d9d9da8fcad1ee02b5475a
- SHA1 d3d257628b0ba55dcc2b1ca90ecad0f96ef33abc
- SHA512 a8f701258b045eecc62b25d2db11cb90dbfe8250b189bd4739f22e54a1cdaa39a459eab71cb7082757cb7a769f8277f57e196c20ad2448eeb6bf01c9a37fe556
- SSDEEP 49152:zdfU8JrHn8eDybODJrtjVG1tbIYGd/3qBlnJJ4TYA0qMeWO:zBLrHnAQZG1RIRt3qfAaez
- TLSH T1A7C55258978FE5F6C09C5570665F8BAF3AB184CE46A1820AC7228C6F2CD3FC46F61D46
- MD5 SHA1 SHA512 SSDEEP TLSH
Zeta_Software_4.4.3/Zeta_Launcher_v4.4.3.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 a66cb258c8a3c3cd2d550af731c5050f6c6ad99e8cee79ae29db641ce834e656
- MD5 b6081db5846c1276501f259e69fd5fce
- SHA1 a3f871887bc90d8f4ed7fbda3b8f794f899e337a
- SHA512 2dd2c955dfbc6ec3d13cb5967f5a2082b77b506b6c53e2a9d0eb754ae41f27da1aafcdb071162903e99c3dd9006a0e37ada268f80a7dd8add56406b5c98d29a4
- SSDEEP 49152:NqV2snR8K/XNfTrF4bz6eon8NeF3TjYNtDaHrqir6r:NZsrmRon8cFDMNpUrqimr
- TLSH T17D79AD036DA548F9C0A9A73A84772655BB34BC08473173EB2E21BEB62F713E09D35794
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
80:2d:58:c1:a0:51:d4:f1:0d:eb:fd:f9:76:44:ac:f4:1e:e6:46:ba
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=bodelan.in,O=t1eoJychn,L=iaKL8,ST=SI5mK0GY,C=US
Chains
Jul 31, 2026
CN=bodelan.in,O=t1eoJychn,L=iaKL8,ST=SI5mK0GY,C=US
Subject
CN=bodelan.in,O=t1eoJychn,L=iaKL8,ST=SI5mK0GY,C=US
Serial Number
4a:ab:0e:87:b0:d0:87:0e
Issuer
CN=bodelan.in,O=t1eoJychn,L=iaKL8,ST=SI5mK0GY,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 1, 2026 - Aug 1, 2027
Minor OS version
1
Major OS version
6
Entry point
478560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
61KB
Virtual Size
354KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
115KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ