bodysmith tales lobotomised 2.zip
- SHA256 7c87f4b6acad2913faadbb6f530b94ab0729562d1d45bc6b588703fab22d1b2b
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bodysmith tales lobotomised 2.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
bodysmith tales lobotomised 2/BodysmithTales.exe
Resource
win11-20260513-en
windows11-21h2-x64
14 signatures
300 seconds
Behavioral task
behavioral3
Sample
bodysmith tales lobotomised 2/data.win
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
300 seconds
General
- Target bodysmith tales lobotomised 2.zip
- Size 16.2MB
- Sample260819-bgc57awsas
- SHA256 7c87f4b6acad2913faadbb6f530b94ab0729562d1d45bc6b588703fab22d1b2b
- MD5 056ed87d244ee4754b82b1f8231e5f83
- SHA1 5aef3a687895f03b9bd7aa566cd166dd188389d3
- SHA512 d67d10a20560072c9eeff16ea57c65058e05ef6f477435dde86002fd72df5989b6a0bb958ae2067fb039552b0f4f8d411eed549e8a91b503f328c71154bc2e00
- SSDEEP 393216:cB1lx35oPBUUj7n2My809S3oBNVwSm8nd5sShdTQOeJt/5NJMthWpvyi:cH35oTWMy809pBTGsLsCeJ95NJMXOB
- TLSH T15A07334020C0A743FDCB28BF3A94E1DBC0257A61DD467876C5D73DA1CABA69E848F257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bodysmith tales lobotomised 2/BodysmithTales.exe
File Explorer
-
bodysmith tales lobotomised 2.zip.zip 16.2MB
-
bodysmith tales lobotomised 2/BodysmithTales.exe.exe 19.5MB
-
bodysmith tales lobotomised 2/data.win15.0MB
bodysmith tales lobotomised 2/BodysmithTales.exe
- IMPHASH e04fec3a7dd86b923d15c0ee80b226cb
- SHA256 d65a95d6e8b048eb611c05c3de9c75d0f86715e94132c6264a7d75ad99fcbb96
- MD5 79d1d0894d400b062f52d273346e8539
- SHA1 66516f61c976ae12611aa859252cc7e0ccd67e6e
- SHA512 ac6149ac6f74694077cd09356d842195c7b4dbf46b6612e5abfdfdd0d444e365933f73563af30a21eba73e430edba077c9cc6d5358dbea7c530f4c27dfd767a0
- SSDEEP 196608:TsJGOkZBHK+lbh+FgilyzVMP/Sp54z49vAR/kVGr19f:TsEOkZFK+lbh+FsQRcE
- TLSH T1EF274B243979C6C9C0B6E47CC566C3ABE9203D94C72887FB4570765B2FFA2E09936127
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
12833940
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\GM\AssetCache\GMS2CACHE\BodysmithT_55EA1CF5\Release\Scripts\llvm-win\Sln\x64\Release\BodysmithTales.pdb
wininet
InternetReadFile
InternetSetOptionA
InternetCloseHandle
HttpSendRequestA
InternetOpenA
HttpQueryInfoA
InternetConnectA
InternetCanonicalizeUrlA
HttpOpenRequestA
InternetCrackUrlA
InternetGetConnectedState
d3d11
D3D11CreateDevice
dbghelp
MiniDumpWriteDump
winmm
timeGetDevCaps
timeBeginPeriod
joyGetPosEx
joyGetPos
timeGetTime
timeEndPeriod
ws2_32
WSAGetLastError
getaddrinfo
WSAStartup
socket
setsockopt
sendto
send
recvfrom
recv
ntohs
listen
getsockopt
ioctlsocket
connect
closesocket
bind
accept
inet_ntop
getnameinfo
select
getpeername
__WSAFDIsSet
htons
WSAAddressToStringA
freeaddrinfo
inet_pton
gdiplus
GdiplusStartup
GdiplusShutdown
comctl32
InitCommonControlsEx
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
rpcrt4
UuidToStringW
UuidCreate
iphlpapi
NotifyIpInterfaceChange
GetAdaptersAddresses
avrt
AvSetMmThreadPriority
AvSetMmThreadCharacteristicsA
propsys
PropVariantToInt64
PropVariantToUInt32
api-ms-win-core-path-l1-1-0
PathCchCombine
kernel32
FreeLibraryAndExitThread
ExitThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
MoveFileExW
SetFileAttributesW
GetFileAttributesExW
HeapWalk
HeapValidate
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetModuleHandleExW
TlsFree
TlsSetValue
TlsGetValue
GetStdHandle
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
GetStringTypeW
GetCPInfo
LCMapStringEx
FlushFileBuffers
GetConsoleOutputCP
DecodePointer
EncodePointer
FlsFree
WriteFile
TlsAlloc
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
FlsSetValue
FlsGetValue
FlsAlloc
OutputDebugStringA
GetCurrentProcess
K32GetProcessMemoryInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CloseHandle
GetLastError
SetWaitableTimer
CreateWaitableTimerW
GetConsoleWindow
GetCommandLineW
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
GetFinalPathNameByHandleW
GetFullPathNameW
SetUnhandledExceptionFilter
SetErrorMode
Sleep
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
SetPriorityClass
SetProcessInformation
GetTimeFormatW
GetModuleHandleW
MoveFileA
HeapReAlloc
WideCharToMultiByte
GetFileAttributesW
GetFileSize
ReadFile
SetFilePointer
FreeLibrary
GetProcAddress
LoadLibraryExW
LocalFree
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
GetTickCount64
InitializeCriticalSection
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
CreateThread
LoadLibraryW
FormatMessageW
GetCurrentDirectoryW
DeleteFileW
SetLastError
GetExitCodeThread
GetSystemInfo
GetVersionExW
GetLocaleInfoW
CreateDirectoryA
FindClose
FindFirstFileW
FindNextFileW
RemoveDirectoryW
GetTempPathA
ResumeThread
CreateProcessW
GlobalAlloc
GlobalUnlock
GlobalLock
SetCurrentDirectoryA
GetCurrentDirectoryA
VerSetConditionMask
VerifyVersionInfoW
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateFileMappingW
MapViewOfFile
ExitProcess
lstrlenA
GlobalFree
GetVersion
LoadLibraryA
DebugBreak
WaitForSingleObjectEx
CreateEventExA
SleepConditionVariableSRW
WakeAllConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
GetNativeSystemInfo
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
LoadLibraryExA
VirtualQuery
VirtualProtect
RaiseException
GetDateFormatW
CompareStringW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
GetModuleFileNameW
ReadConsoleW
GetTimeZoneInformation
SetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
EnumSystemLocalesW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetEndOfFile
HeapSize
MultiByteToWideChar
WriteConsoleW
user32
IsClipboardFormatAvailable
GetForegroundWindow
CreateDialogParamW
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
DrawTextW
GetAsyncKeyState
keybd_event
SetDlgItemTextA
ReleaseDC
GetDC
GetMonitorInfoW
EmptyClipboard
MonitorFromPoint
SetWindowLongPtrW
GetCursorPos
SetCursorPos
MessageBoxW
SetProcessDPIAware
EnumDisplaySettingsA
IsDialogMessageW
MsgWaitForMultipleObjectsEx
PeekMessageW
DispatchMessageW
TranslateMessage
wsprintfW
EnumDisplayDevicesW
EnumDisplaySettingsW
GetClipboardData
SetClipboardData
MonitorFromWindow
LoadImageW
LoadCursorW
OpenClipboard
UnhookWindowsHookEx
SetWindowsHookExW
FindWindowExA
FindWindowA
SetParent
ScreenToClient
SetCursor
AdjustWindowRectEx
GetClientRect
InvalidateRect
SetForegroundWindow
UpdateWindow
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyState
SetFocus
BringWindowToTop
IsIconic
SetWindowPlacement
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
PostThreadMessageW
PostMessageW
SendMessageW
SendMessageA
EnumWindows
GetWindowLongPtrW
IntersectRect
GetWindowRect
GetActiveWindow
IsWindowVisible
GetLayeredWindowAttributes
MessageBoxA
GetWindowLongW
GetWindowPlacement
MapWindowPoints
ClientToScreen
CloseClipboard
SetWindowTextW
CallNextHookEx
MoveWindow
gdi32
SelectObject
GetStockObject
GetRgnBox
DeleteObject
CreateRectRgnIndirect
GetDeviceCaps
CombineRgn
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegQueryValueExW
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegOpenKeyExW
shell32
SHGetFolderPathW
ShellExecuteW
ole32
PropVariantClear
CoInitialize
CoTaskMemFree
CoCreateInstance
CoCreateFreeThreadedMarshaler
dwmapi
DwmSetWindowAttribute
DwmGetWindowAttribute
DwmGetCompositionTimingInfo
imm32
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmAssociateContext
Name
.text
Size
13.6MB
Virtual Size
13.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
906KB
Virtual Size
4.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
502KB
Virtual Size
502KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
403KB
Virtual Size
403KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=259, version=33145,
count=1, productName=Unmarked objects (old),
count=6, id=253, version=28518,
count=20, id=260, version=30034,
count=12, id=259, version=30034,
count=93, id=261, version=30034,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=221, id=261, version=33145,
count=75, id=260, version=33145,
count=43, id=257, version=33145,
count=397, id=1, productName=Unmarked objects,
count=135, id=260, version=30159,
count=358, id=261, version=30159,
count=1123, id=265, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
bodysmith tales lobotomised 2/data.win
- SHA256 64a55aba8dc4bb9eb7e56c92ee546f41c9e6f65a4b98024aa22cda6e48a5f3cf
- MD5 9335e3a9354ba1698c949739a4762ee2
- SHA1 f4d6c01455f8ac97eb6d4c73e6eaa832e73ebe91
- SHA512 53d6dab78e73dad1a8797d2febe25f21dba110dffe45fffed7847b75d9f660e92eebb625c1a1b225e0778ca270d7df868c9cc9880fb63acf47b5ac6deaebc3c3
- SSDEEP 393216:GedXQwYkfepf6ZSsPHgMsT4NjU7GxSDqhNP:35xfAiZnsT4NjUqSOhNP
- TLSH T1EBF64AD2F504E982CC555E394E67D9A847323D36FE55861332C0BB4F3AB3292EA31786
- MD5 SHA1 SHA512 SSDEEP TLSH