virus_infected[.]zip

Resubmissions

17/08/2026, 00:54

260817-a9bbmazhqf

17/08/2026, 00:50

260817-a7bvdazhmb3

Sharing

Copy URL Twitter E-mail

General

Target
virus_infected.zip
Size 136KB
Sample260817-a9bbmazhqf
SHA256 f30711d0220bd1e34c468ebdd2d8568b59146ea2f94997420c6ceac9892b4ede
MD5 e0bad6e77733863f824f9df5f2fb3ed8
SHA1 0752d5ae12b6db24ba5fd14f8cf9141ceb3fdb72
SHA512 ab88aada0763a1e1018128ab71e14a6d00d013c43e0a47caf29f8fb9e7fae7cd2424a76387fc24f063033e650e6275a9499c1bf17a856f620e904953a17afe22
SSDEEP 3072:rJUP3cYsY6407nc6l0iRAQibi+HLbZPqvNPbRVdHI3ale:VUjsYtTwApi+HLbdeNPlVdoke
TLSH
T183D312191242D27DE1703B2F41304578F45CDCA2A6D4BAFF2F1CB8C15AB6FF6A226265
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cmd.exe

File Explorer

virus_infected.zip

.zip 136KB
cmd.exe

.exe 283KB

virus_infected.zip

SHA256 f30711d0220bd1e34c468ebdd2d8568b59146ea2f94997420c6ceac9892b4ede
MD5 e0bad6e77733863f824f9df5f2fb3ed8
SHA1 0752d5ae12b6db24ba5fd14f8cf9141ceb3fdb72
SHA512 ab88aada0763a1e1018128ab71e14a6d00d013c43e0a47caf29f8fb9e7fae7cd2424a76387fc24f063033e650e6275a9499c1bf17a856f620e904953a17afe22
SSDEEP 3072:rJUP3cYsY6407nc6l0iRAQibi+HLbZPqvNPbRVdHI3ale:VUjsYtTwApi+HLbdeNPlVdoke
TLSH
T183D312191242D27DE1703B2F41304578F45CDCA2A6D4BAFF2F1CB8C15AB6FF6A226265
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

cmd.exe

IMPHASH 272245e2988e1e430500b852c4fb5e18
SHA256 badf4752413cb0cbdc03fb95820ca167f0cdc63b597ccdb5ef43111180e088b0
MD5 2b40c98ed0f7a1d3b091a3e8353132dc
SHA1 df79c86fdd11b9ccb89148458e509f879c72566c
SHA512 80919a638e41547a4061ae1c9b1aeda2d2e4b3b5f0f22b9b5a1e9102d873b17ac2eaf99df02486c72b6a84dd6f7ba87b94ffccc6f8c34e271a6aea25099edc33
SSDEEP 6144:W4WA1B9BxDfQWKORSqY4zOcmpdlc3g4otdlSm:R1BhkWvSqY4zvmjOwVk
TLSH
T1AB54291D23991CE5D927827D9903C226C6727C346321A6EF22D0CD7B6F63AE97A34F05
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

102224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cmd.pdb

msvcrt

_setmode exit iswxdigit time srand _wtol fflush wcsstr iswalpha wcstoul _errno printf rand fprintf wcsncmp _pipe _commode _lock wcsrchr realloc towlower _initterm __setusermatherr setlocale _wcsupr iswdigit _ultoa _cexit _unlock _exit __dllonexit _wcsicmp iswspace wcschr fgets ??_V@YAXPEAX@Z _pclose ferror _onexit __CxxFrameHandler3 _open_osfhandle _close feof _dup _wpopen _wcsnicmp ?terminate@@YAXXZ memset wcstol _get_osfhandle _dup2 _getch towupper memcmp _setjmp wcsspn _fmode qsort __set_app_type _tell _wcslwr longjmp _local_unwind _purecall __C_specific_handler ??3@YAXPEAX@Z memcpy_s free calloc __getmainargs _XcptFilter _amsg_exit ??1type_info@@UEAA@XZ memmove memcpy _CxxThrowException _vsnwprintf swscanf __iob_func malloc _callnewh ??0exception@@QEAA@AEBQEBD@Z ??0exception@@QEAA@AEBQEBDH@Z ??0exception@@QEAA@AEBV0@@Z ??1exception@@UEAA@XZ ?what@exception@@UEBAPEBDXZ wcscmp

ntdll

RtlLookupFunctionEntry RtlCaptureContext NtOpenProcessToken NtQueryInformationToken NtClose NtOpenThreadToken RtlFreeHeap NtFsControlFile RtlDosPathNameToNtPathName_U RtlVirtualUnwind RtlFreeUnicodeString RtlReleaseRelativeName NtOpenFile RtlDosPathNameToRelativeNtPathName_U_WithStatus NtSetInformationFile NtQueryVolumeInformationFile NtSetInformationProcess NtQueryInformationProcess RtlNtStatusToDosError NtCancelSynchronousIoFile RtlCreateUnicodeStringFromAsciiz RtlFindLeastSignificantBit

api-ms-win-core-kernel32-legacy-l1-1-0

CopyFileW GetConsoleWindow

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW GetModuleFileNameA LoadLibraryExW GetProcAddress GetModuleFileNameW GetModuleHandleExW

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW InitializeCriticalSection WaitForSingleObject ReleaseSemaphore TryAcquireSRWLockExclusive WaitForSingleObjectEx ReleaseMutex ReleaseSRWLockShared AcquireSRWLockShared LeaveCriticalSection CreateMutexExW EnterCriticalSection ReleaseSRWLockExclusive OpenSemaphoreW

api-ms-win-core-heap-l1-1-0

HeapFree HeapAlloc GetProcessHeap HeapSetInformation HeapReAlloc HeapSize

api-ms-win-core-errorhandling-l1-1-0

SetLastError UnhandledExceptionFilter GetLastError SetErrorMode SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

InitializeProcThreadAttributeList GetCurrentThreadId UpdateProcThreadAttribute DeleteProcThreadAttributeList GetStartupInfoW CreateProcessAsUserW OpenThread CreateProcessW ResumeThread TerminateProcess GetExitCodeProcess GetCurrentProcess GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

GetThreadLocale SetThreadLocale FormatMessageW GetLocaleInfoW GetCPInfo GetACP GetUserDefaultLCID

api-ms-win-core-debug-l1-1-0

OutputDebugStringW DebugBreak IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-memory-l1-1-0

VirtualAlloc VirtualQuery VirtualFree ReadProcessMemory

api-ms-win-core-console-l1-1-0

ReadConsoleW SetConsoleCtrlHandler SetConsoleMode WriteConsoleW GetConsoleMode GetConsoleOutputCP

api-ms-win-core-file-l1-1-0

CreateFileW FlushFileBuffers GetFileAttributesExW GetDriveTypeW FindClose FindNextFileW CreateDirectoryW GetVolumeInformationW SetFileAttributesW SetEndOfFile SetFilePointerEx WriteFile DeleteFileW SetFileTime GetVolumePathNameW SetFilePointer ReadFile GetFileAttributesW GetFileType RemoveDirectoryW FindFirstFileExW CompareFileTime GetFullPathNameW GetDiskFreeSpaceExW FileTimeToLocalFileTime GetFileSize FindFirstFileW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte MultiByteToWideChar

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW GetEnvironmentStringsW ExpandEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SearchPathW SetCurrentDirectoryW GetCurrentDirectoryW GetEnvironmentVariableW SetEnvironmentStringsW GetStdHandle

api-ms-win-core-console-l2-1-0

SetConsoleCursorPosition GetConsoleScreenBufferInfo ScrollConsoleScreenBufferW FillConsoleOutputAttribute FillConsoleOutputCharacterW FlushConsoleInputBuffer SetConsoleTextAttribute

api-ms-win-security-base-l1-1-0

GetFileSecurityW RevertToSelf GetSecurityDescriptorOwner

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime SetLocalTime GetSystemTimeAsFileTime GetTickCount GetWindowsDirectoryW GetLocalTime GetVersion

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime FileTimeToSystemTime

api-ms-win-core-datetime-l1-1-0

GetDateFormatW GetTimeFormatW

api-ms-win-core-systemtopology-l1-1-0

GetNumaNodeProcessorMaskEx GetNumaHighestNodeNumber

api-ms-win-core-console-l2-2-0

SetConsoleTitleW GetConsoleTitleW

api-ms-win-core-processenvironment-l1-2-0

NeedCurrentDirectoryForExePathW

api-ms-win-core-registry-l1-1-0

RegCloseKey RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegEnumKeyExW RegDeleteKeyExW RegDeleteValueW RegQueryValueExW

api-ms-win-core-file-l2-1-0

MoveFileExW CreateSymbolicLinkW CreateHardLinkW MoveFileWithProgressW GetFileInformationByHandleEx

api-ms-win-core-heap-l2-1-0

GlobalAlloc GlobalFree LocalFree

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-winrt-l1-1-0

RoInitialize RoUninitialize

api-ms-win-core-processtopology-l1-1-0

GetThreadGroupAffinity

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpW lstrcmpiW

api-ms-win-core-processtopology-obsolete-l1-1-0

SetProcessAffinityMask

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Name

.text

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

780B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

virus_infected.zip

cmd.exe

msvcrt

ntdll

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-console-l2-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-datetime-l1-1-0

api-ms-win-core-systemtopology-l1-1-0

api-ms-win-core-console-l2-2-0

api-ms-win-core-processenvironment-l1-2-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-file-l2-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-processtopology-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-processtopology-obsolete-l1-1-0

api-ms-win-core-apiquery-l1-1-0

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

generic