0ac7d87244e7fe56b19f28d3e7f4196501626efa43d0a408d9c0395f8b6364ef
- SHA256 0ac7d87244e7fe56b19f28d3e7f4196501626efa43d0a408d9c0395f8b6364ef
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vm.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
vm.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 0ac7d87244e7fe56b19f28d3e7f4196501626efa43d0a408d9c0395f8b6364ef
- Size 78KB
- Sample260812-ej63tsvwew
- SHA256 0ac7d87244e7fe56b19f28d3e7f4196501626efa43d0a408d9c0395f8b6364ef
- MD5 d30d2abbb15e6486fded01d78a41da66
- SHA1 1d4aa08d9c62a1405488c1094a17abb9bc2684d6
- SHA512 f2c679f715214019f1af4175714de004f3c7b156e74624b8381229861561fc06e853b0d54038d67318a7a6df5c6f3f6dd6f5c9aeb0d728c593903713106244aa
- SSDEEP 1536:oqL+BsnhSJ956hSDDqOgsmi6S3wDDusfJDVaw3kXAE7ab1H:oqL+qhSJ956SVgmB3wDisBX3kQE7s
- TLSH T1D673025BE127F27DD81EAD5478DA6A79420B65AE8E9B4840D7072C4E0381FD20A3EFD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/vm.exe
File Explorer
-
0ac7d87244e7fe56b19f28d3e7f4196501626efa43d0a408d9c0395f8b6364ef.zip 78KB
-
app.db5KB
-
vm.exe.exe 151KB
app.db
- SHA256 5948b03c0007e89cf9e0a29564b36535051298b8429e761a6dd639d34ba43055
- MD5 82ed34dbcaeac440ff8ce82510fd30eb
- SHA1 56091cb273ca04cb3dd02310f7afa80121bc0476
- SHA512 a89a191c5cf10ebb0a7ba14b2d473ca2d772d84103efa38ccb0c1d877ca2acfa5d622be3fa337e98da7298111afb97e58137c7905aa9babe80ee92ad971a184a
- SSDEEP 12:TL2HRrx3THLIJRCxoSYikeKU7s6F1HJxQ0/4dXgHcDlIBI2yCrCs:TLcVriRqoPZeKaFRJxb4lJICfCrCs
- TLSH T1C4B1DCF3E78C4E88D4255CBECC4B620B3A81C2D092374BE302A1001941182D4ACB0DC1
- MD5 SHA1 SHA512 SSDEEP TLSH
vm.exe
- IMPHASH fae77879e44e9504dbbbae7f3fe9340f
- SHA256 6383a879e288b389ba4544d7e1ffeae0ef07339ace94f1bda1eb6ee7e40df392
- MD5 c818d3ea3de29ae57d9e49d95360c940
- SHA1 1b52e4c8be057ffc420b2c2417ece4183bd2b30a
- SHA512 4ee407cdf50049304395c5e2291f575c04c4c266bfe3bb301ee23d2a9ade81de0e3d2161219b16e95f156b667c665e2fcc430200fedae33da206a5b29a0ba474
- SSDEEP 1536:x/fhY0ytAgPOPQl0YFjAps0DSVLrWtTeQiGKtmBiZ0NQ6gxhP9Qidggnd5KCwtT4:Rfhi2gPOPQlZqPDSVLSv4KNQVPpgySe
- TLSH T19BE35C13B69454FAE04BC078835585A367357CDA0B22A9FF02E972342F69AE67F3C315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
107368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetModuleHandleA
CreateThread
CloseHandle
SetThreadStackGuarantee
GetCurrentThread
ReleaseMutex
GetLastError
GetCurrentProcessId
GetTickCount
CreateMutexA
GetProcAddress
GetModuleFileNameW
LoadLibraryA
WaitForSingleObjectEx
GetCurrentProcess
SetLastError
GetCurrentThreadId
GetLocalTime
GetComputerNameA
GetSystemDirectoryA
QueryPerformanceCounter
GetProcessHeap
HeapFree
HeapAlloc
GetModuleHandleW
FormatMessageW
GetSystemTimeAsFileTime
GetStartupInfoW
IsProcessorFeaturePresent
WaitForSingleObject
CreateMutexW
GetCurrentDirectoryW
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetFileInformationByHandleEx
GetFileInformationByHandle
FindClose
FindFirstFileExW
SetFileInformationByHandle
SetFileTime
CreateFileW
GetFullPathNameW
GetEnvironmentVariableW
WriteConsoleW
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleMode
GetStdHandle
RtlVirtualUnwind
WideCharToMultiByte
lstrlenW
RtlLookupFunctionEntry
RtlCaptureContext
SetUnhandledExceptionFilter
HeapReAlloc
GetCommandLineW
ntdll
NtReadFile
RtlNtStatusToDosError
NtWriteFile
user32
SetMenu
GetMessageW
TranslateMessage
RegisterClassExW
AppendMenuW
GetSystemMetrics
GetCursorPos
DefWindowProcW
InvalidateRect
CreateWindowExW
DispatchMessageW
DrawTextW
DestroyWindow
CreateMenu
EndPaint
FillRect
GetClientRect
BeginPaint
PostQuitMessage
KillTimer
SetTimer
MessageBoxW
gdi32
SelectObject
Ellipse
SetTextColor
CreateFontW
GetStockObject
SetBkMode
DeleteObject
CreateSolidBrush
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WakeByAddressSingle
WaitOnAddress
vcruntime140
__current_exception_context
__CxxFrameHandler3
memcpy
memcmp
__current_exception
__C_specific_handler
memset
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_get_narrow_winmain_command_line
_set_app_type
_configure_narrow_argv
_cexit
_c_exit
_initterm_e
_register_thread_local_exe_atexit_callback
_initterm
_seh_filter_exe
_exit
terminate
_initialize_onexit_table
_register_onexit_function
_crt_atexit
exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
Name
.text
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
596B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=9, id=260, version=35207,
count=23, id=261, version=35207,
count=3, id=257, version=33145,
count=126, id=1, productName=Unmarked objects,
count=16, productName=Unmarked objects (old),
count=1, id=258, version=35228,