4e03ff7654cc58b148cfee57ba8da6e23ceaa80b9736695c85003052ceafbf7d
- SHA256 4e03ff7654cc58b148cfee57ba8da6e23ceaa80b9736695c85003052ceafbf7d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
artifact2_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
artifact2_x64.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 4e03ff7654cc58b148cfee57ba8da6e23ceaa80b9736695c85003052ceafbf7d
- Size 20KB
- Sample260821-mesnmsstf1
- SHA256 4e03ff7654cc58b148cfee57ba8da6e23ceaa80b9736695c85003052ceafbf7d
- MD5 e4d85a492483dc7e6af5b4bc32fddffa
- SHA1 0204be429a8dac9d2a993f45101987cdc391acb8
- SHA512 e7b87bc4bd160b366c83da2c5d1b69aaa419eaf63239d99457d4246e65a021f9b16661bf02b5fd097f8919299203fadace6dd3bc9e5093215d0a8bf2cb40653f
- SSDEEP 384:hGDAptIkR0QKNsktFRxRwyQ347r7AtQ9+yfxzwcB1FfZeSTG5fhPgGh8Nlozjwmm:U0pt7q3jxayQ3CrkRyfxzwcBUEGElE8D
- TLSH T16DA2E1BC734A5D0FF57126192982C30CE37562886B1B3A90F76E361C5EBCC16EC9C650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/artifact2_x64.exe
File Explorer
-
4e03ff7654cc58b148cfee57ba8da6e23ceaa80b9736695c85003052ceafbf7d.zip 20KB
-
artifact2_x64.exe.exe 40KB
artifact2_x64.exe
- IMPHASH b69ad0c881e029fcd2de8980610d2b36
- SHA256 24e0082d1a5c13b2854d7cdd3ab724cf8f8c1af83b262aeb0a1540268efe7bb4
- MD5 8073551556ffa7a02186fa8b7ff386a8
- SHA1 96cecef037e2f3f920716192f7bbc8f342ca62e5
- SHA512 dc4cac99f3eea21010202eeae6e0bbf3c924507c7c7975e267d8e2bcfd537577d21771be1d1d0249380d24c119995990342a70c8297d006d3fe721c190d525cc
- SSDEEP 768:rHOwsh/RE8KX002s+j8Rx0bUNAOXNUVhuvL1b2qZ6PXTzI:otBsis8oNpN+cvLRwPjz
- TLSH T192133B6EA34364ECD20BD27846EB6733BC31FC634160DE7F16A4E6701E11E516B2AA34
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5328
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
CloseHandle
ConnectNamedPipe
CreateFileA
CreateNamedPipeA
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReadFile
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualAlloc
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
memcpy
signal
strerror
strlen
strncmp
vfprintf
wcslen
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
136B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ