25702856031.zip
- SHA256 a7446902c69d0713480fc1808527d88f616c4236811ee1b1a2229eda61d4f80b
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
42daf0f3080b50a0a1f14291f5ae3fa8fa400d838a915618f68a8f059777bcd4.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
42daf0f3080b50a0a1f14291f5ae3fa8fa400d838a915618f68a8f059777bcd4.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 25702856031.zip
- Size 55KB
- Sample260819-b991macj8w
- SHA256 a7446902c69d0713480fc1808527d88f616c4236811ee1b1a2229eda61d4f80b
- MD5 b748a467f502ccc1b63503bdc470df31
- SHA1 91523f799ad34a1c9812a2df7658be3922300085
- SHA512 ae6785f28e2e38d733eeb3e32df164285e7a04b0b5a51b0fa9f77ed15ae227040cf77764aa57df30fc0a8bc8a63429a765a1a1629501ae980dcd5b517bfb10a4
- SSDEEP 1536:Al4u04UZUtCmTr8ZLhOcevM/hwfDO13NYobi:V1ivTr8wc4GCbO1y9
- TLSH T14D43F255931B7400E3CF56692A5FBF1C4BB42770DB7982A791207B44EC9B8F1E82DA18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/42daf0f3080b50a0a1f14291f5ae3fa8fa400d838a915618f68a8f059777bcd4
File Explorer
-
25702856031.zip.zip 55KB
-
42daf0f3080b50a0a1f14291f5ae3fa8fa400d838a915618f68a8f059777bcd4.dll 99KB
42daf0f3080b50a0a1f14291f5ae3fa8fa400d838a915618f68a8f059777bcd4
- IMPHASH 77aea73f02029d8b1d439a9b6b8b3c9c
- SHA256 42daf0f3080b50a0a1f14291f5ae3fa8fa400d838a915618f68a8f059777bcd4
- MD5 4bb54e135302bf3c21bff89177f70759
- SHA1 630e8bcade0d273eb6499aa681dfe8377eb51655
- SHA512 5e20fb767331c6a4da0a584e605a0516adc7d98ec6feead2581d0e852bb98e395f03b023447150162980e60663feecd0b2ffed460ce7fe02557748db0a7c8f97
- SSDEEP 1536:pp3JOtYb5r7xyXGs1ObmcHuiA/K55pA5zgwnRqTtiIU0rXVX6gHeA33:ppkt03xyWLLyRgVxiYrFKgHeI
- TLSH T19EA36B2179D0C076E0A6953C1871DB328B7F78319EB59887BB94177A2EB07C09E2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
31625
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
MultiByteToWideChar
LoadLibraryExA
ReleaseMutex
WaitForSingleObject
lstrcatA
GetWindowsDirectoryA
GetTempPathA
lstrcpyA
ExitThread
GetProcessHeap
SetEndOfFile
GetCurrentThreadId
Sleep
CreateThread
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetFileTime
FindResourceA
GetModuleFileNameA
WriteConsoleW
LoadLibraryW
GetStringTypeW
LCMapStringW
CreateFileA
FlushFileBuffers
SetStdHandle
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetModuleHandleW
GetSystemInfo
VirtualQuery
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
ExitProcess
WriteFile
GetModuleFileNameW
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileW
user32
DispatchMessageA
GetMessageA
CharNextA
PostThreadMessageA
advapi32
RegQueryInfoKeyW
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerExA
ole32
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoRevokeClassObject
CoUninitialize
CoTaskMemAlloc
oleaut32
VarUI4FromStr
shlwapi
StrStrIA
ServiceMain
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=158, productName=VS2010 build 30319, version=30319,
count=110, id=170, productName=VS2010 build 30319, version=30319,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=127, id=1, productName=Unmarked objects,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=46, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,