Slinky.rar
- SHA256 1e419d7a6aad968ad3d69ae7a119e0075fafcb36f0c3c1fd49195e04246edcd8
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
slinkyloader.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
slinkyloader.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target Slinky.rar
- Size 17.5MB
- Sample260809-t6f79aak8x
- SHA256 1e419d7a6aad968ad3d69ae7a119e0075fafcb36f0c3c1fd49195e04246edcd8
- MD5 a098ae4f7aadb1c317c60ab01243b7ab
- SHA1 598e0dc109b30775924deadb6bc7615ba2947c5c
- SHA512 c9e8c151e9e93d524d3c6207480305f39b742e969db59252f9ea4196bcb514b11cef7c49b55e4586b3b3d7f7ab83a6678ede67ffb80b85c7b5991a20ccc0bb17
- SSDEEP 393216:Mzhyb1IlTktXvs4xqxYLVNIRNSCo70bENv5gRs85nkcLY8:MNySlAtXveuZNIRECoaUX85kc5
- TLSH T1890733D0F0F528BB16643BD75993A09D3BA3C9B736642EA19E968FFC8E45300509713B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/slinkyloader.exe
File Explorer
-
Slinky.rar.rar .zip 17.5MB
-
slinkycrack.zip.zip 17.5MB
-
slinkyloader.exe.exe 18.4MB
slinkycrack.zip
- SHA256 505d1b351e058bef471dac95fc21b46dcfc2a30479eef91533b2eff85a8654c5
- MD5 07833687ae4016b8b501e30725ec629b
- SHA1 e706e01c675f41af4349794f7085ccac350a25d8
- SHA512 e580ae4d1dc5ed0207b058f2c42e72eb1ab2f61f38b7b0bba8ee8b46d8096ab7b83ea5d2617972aeaea3fb89d61ba45f88e472b839b9dfd03ec5567638042f46
- SSDEEP 393216:Vzhyb1IlTktXvs4xqxYLVNIRNSCo70bENv5gRs85nkcLYT:VNySlAtXveuZNIRECoaUX85kcC
- TLSH T1740733D0F0F528BB16643BD75993A09D3BA3C9B736642EA19E968FFC8E45300509713B
- MD5 SHA1 SHA512 SSDEEP TLSH
slinkyloader.exe
- IMPHASH 40d16206c9d6779ad4eec7de1bbc9c0e
- SHA256 cef5b60321f17991400a19072052535638c0a5c02d338234686552deadeea82e
- MD5 a2223005e6d186689577e5a2b785a16b
- SHA1 1075e177247880d3e1ec940623500bf2e9b275e3
- SHA512 073f8e682d2468bfe7d55b82cf0ff5dafd2754da2813de2116551e2811809debba7f06c5d8ed5901a59703bfb306fd5fd05d9d1e797bf9e7887826709c6993c6
- SSDEEP 393216:cKRqNWNKROYkhkpXorNv+oXsDS3LNK3HOU6x0pW/lJktSrZPLAB:/ANWKRrpYrNvou7NK3uU6E29dPL
- TLSH T1001733D267D04BD8C353C6BC9583419EF2E27D07D77B8F9B3AC79A020AA1948506BD39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
27160
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
SizeofResource
SetConsoleTitleA
OpenProcess
Sleep
LockResource
CloseHandle
LoadResource
FindResourceW
GetModuleHandleW
WriteProcessMemory
WaitForSingleObject
GetModuleHandleA
CreateToolhelp32Snapshot
GetExitCodeThread
Process32NextW
Process32FirstW
GetProcAddress
VirtualAllocEx
CreateRemoteThread
lstrcmpiW
GetCurrentDirectoryW
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetLastError
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
LocalFree
FormatMessageA
GetLocaleInfoEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
msvcp140
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Xlength_error@std@@YAXPEBD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Xtime_get_ticks
_Query_perf_counter
_Thrd_sleep
?_Syserror_map@std@@YAPEBDH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
__current_exception
_CxxThrowException
memset
__std_terminate
__std_exception_copy
__std_exception_destroy
memcpy
__C_specific_handler
memmove
api-ms-win-crt-stdio-l1-1-0
ungetc
setvbuf
fgetpos
fwrite
_fseeki64
_get_stream_buffer_pointers
fsetpos
fgetc
fclose
fflush
__acrt_iob_func
_set_fmode
fputc
__p__commode
__stdio_common_vfprintf
fread
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_cexit
__p___argv
_crt_atexit
_initialize_onexit_table
_exit
_c_exit
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
exit
_set_app_type
_seh_filter_exe
_register_onexit_function
_register_thread_local_exe_atexit_callback
_initterm_e
terminate
system
_invalid_parameter_noinfo_noreturn
__p___argc
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
230KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
18.1MB
Virtual Size
18.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
228B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=31935,
count=3, id=259, version=31935,
count=29, id=261, version=31935,
count=6, id=257, version=31935,
count=3, id=257, version=26715,
count=182, id=1, productName=Unmarked objects,
count=2, id=265, version=32217,
count=1, id=255, version=32217,
count=1, id=151,
count=1, id=258, version=32217,