file.7z
- SHA256 48cd456c451d1a299af9ffd665cecd49251ae496da271b77f08c21a1995cd80e
Password
7907
Behavioral task
behavioral1
Sample
appFile.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
appFile.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
General
- Target file.7z
- Size 20.4MB
- Sample260808-ydek6sfc36
- SHA256 48cd456c451d1a299af9ffd665cecd49251ae496da271b77f08c21a1995cd80e
- MD5 b1171b5a4d975310d55f6e0927b74196
- SHA1 f99dc3287fe9d633164f44ff237cd8b52c5690a0
- SHA512 fd3cf176faa238fc231be7e27d389b9737825ac9360f5e7b19e51c25c0b66ce45b4fb76bd9beb42c01407d255ce3b7a557a523894c46ad4166db3248e129af09
- SSDEEP 393216:f+85zuHoJ4NpOaAMaJFiL3lUVUzBZMGvmW3dCJJIx+QrJgvFBYMrU9Vzr:VGNAfM53eSHMGBIMJgfYMrU9N
- TLSH T13927337D1F6050EC0449E8DE74B83819851355AB6E31A9E5EC2C0815BAAB1FF27B2F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
File Explorer
-
file.7z.7z 20.4MB
-
appFile.exe.exe 831.9MB
appFile.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 34a9116bf497fea382f1ac2fb41cbdc14f6a6f3bc70d2fbb04afd4a2abe54017
- MD5 97f991b0f463d0dcc7c229ea887f2cbf
- SHA1 076c3f69e7ceab0894558224c410325839a9c1fe
- SHA512 35b6209688bbe4fda8c394630f0d5c9d70a74cd16970d079332f143ff7c3d4fb103b0ff3d7edf33224385ff507dbacfb7364eb01d2ebbc9ad637a44cbf505da1
- SSDEEP 393216:cWFU9moRaHQ4Nsn2uYy2g7JKTqhluBx71S5Nxub8kK/rVhpe2A+2SZfiHn1E5doZ:cWFToRaHQis2tqhluGrubou6RiJreS
- TLSH T1E499BF02B7F80065F1B7973489B79A12EA36BC611B31D3DF1290A66D1E737C09E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
7907
Minor OS version
1
Major OS version
6
Entry point
473920
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
53KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
108KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ