file_e089fcbca1d04e83b630346f1dcf4a28_2026-08-05_16_12_05_766000[.]zip

resource
unpack001/entry_1_0/ZONDTEM1D.exe

file_e089fcbca1d04e83b630346f1dcf4a28_2026-08-05_16_12_05_766000.zip

SHA256 aca1ee3c28bb1aa1ab36ed10df7eaeca03d8dd7f44009ffff0af51eb6374c680
MD5 f590711e98aed71a430c8a599464a16d
SHA1 0c2621a0b5a577185e0d05280a86865f00344f6c
SHA512 3ff97baf0a7c51502a1d5c04dfc6eef4cfdc5b230aefd1e454aa010e85f22ad3ec7869fb3e3d8bd676d9d1d2fc2592eb29c4afe777603e5ee703e4d7d9e55b65
SSDEEP 49152:slaAfpO2L4MSyu5UlUPnlyjTzUFQ/urzkWdJzklXPU7phU+VVm2dLQ:slNptlg5xA/zz/izkQSqhUr
TLSH
T1E0E533C4E0AEF141F546BD53B6D3130E6A2B904B441BDA361ABC58E9D0B9691BFC0C7E
MD5 SHA1 SHA512 SSDEEP TLSH

entry_1_0/ZONDTEM1D.exe

SHA256 ec6b4972de50a47fe489506347f523c24b5ff016c9539992df6f69949cdf86b6
MD5 547dee4530a57b098ec3b75b9070369f
SHA1 89f69ab9352e38a1157242384d4f2450228734a0
SHA512 90fbfaa41a1a509f4bf099b8975b4c35f6e438879054784c1be2996f73b2a6c60cc90780a0910d67b96f70c8629e46dfba034f9497b3856c804e39c882a3f4b0
SSDEEP 98304:5BZcCjUvYkRm+kRmpZZEQTq8V7gMHgTJIV5qkf7k8iSm91tV4/v1ipi/5HVTy3Hh:2CjaxkR5t89/lVxT9iS3/5HVtGJ
TLSH
T17E865A23BA9AD436C45715389D1B9BED1A2BBF307E20559736A93F2CEFB53803524213
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5554864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

5.3MB

Virtual Size

5.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

140KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

40B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

307KB

Virtual Size

307KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

manifest.json

SHA256 cde18836a80ee425615e577dc3a99487d1349d8f07c30b0098c7e275f15083c1
MD5 9201682759724ab003a9696eb8dfd24b
SHA1 117b79fd159e97ad0dfde767fdf09f0442e0d8ab
SHA512 cba373ca6fe578c466ea31b2ea01ff20010e7c7d9dba89e472376c83fc27fcbbb0f865c7dcde0fd9271e4401fd296abfc2a84cc51f4a85a771c3d3db73c8f258
TLSH
T188E0269DE075810F65A2FF040B422DE36623C4BCCB61D7312ACD8AA350D4E210A69624
MD5 SHA1 SHA512 TLSH

script_output.txt

SHA256 cde18836a80ee425615e577dc3a99487d1349d8f07c30b0098c7e275f15083c1
MD5 9201682759724ab003a9696eb8dfd24b
SHA1 117b79fd159e97ad0dfde767fdf09f0442e0d8ab
SHA512 cba373ca6fe578c466ea31b2ea01ff20010e7c7d9dba89e472376c83fc27fcbbb0f865c7dcde0fd9271e4401fd296abfc2a84cc51f4a85a771c3d3db73c8f258
TLSH
T188E0269DE075810F65A2FF040B422DE36623C4BCCB61D7312ACD8AA350D4E210A69624
MD5 SHA1 SHA512 TLSH

stdout.txt

SHA256 a4c92648a3f87e62e682a97a596dd8ef03bc933013f85694531795559653edf6
MD5 6f61e09aa065a738aaa50f2a96411bc8
SHA1 563da3a2c9b01dff449ddcb103a3f19964e2da9b
SHA512 31e81535f4a8c9a2bcb9b5d2a681ca280cae83ba28dcad90ac26cfec3dc7b5c413739cee117a00c395d6fefab112aaabc831de000caa37f3e6ba491d4d275e26
TLSH
T139F099350D626710571600C50BACD253D2D0E51822ECC2A8F9FC428ADD41FEEC2F8A28
MD5 SHA1 SHA512 TLSH

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer