4jOh96kFEuu6_patched_pw_infected.zip
- SHA256 15beb2c88781f6a5ba630cda3b79d57e4b843b6bbe8530412b4dd78204a58c3b
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4jOh96kFEuu6_patched.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4jOh96kFEuu6_patched.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 4jOh96kFEuu6_patched_pw_infected.zip
- Size 257KB
- Sample260825-dn8lsawemb
- SHA256 15beb2c88781f6a5ba630cda3b79d57e4b843b6bbe8530412b4dd78204a58c3b
- MD5 365f854cf3df188ce81fd3e783b6769f
- SHA1 df2f6a9c3e16f1f4873f8526598193a76e80e92d
- SHA512 bd5d791ab4d20d0f42402e86be45c19f76dfb3332c321b20ff5b39bc9240323e4d6b1707702c883b75f79026deecca177147107dd1afdb36d1eca70fda86e54d
- SSDEEP 6144:qHYsLza9mtemgMzito6h7HPY48mQZpZGbtdO:qHzZQJVpCmQZpcdO
- TLSH T18F442329611C444B22F28871E3EB4B73CAC04F64D67A4A5DE4F76036D49C1F09FA1ADB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4jOh96kFEuu6_patched.exe
File Explorer
-
4jOh96kFEuu6_patched_pw_infected.zip.zip 257KB
-
4jOh96kFEuu6_patched.exe.exe 516KB
4jOh96kFEuu6_patched.exe
- IMPHASH 7f972135e4ef2afd8f6b7ede6e0f3f09
- SHA256 682e8f15cbc46b3bc6cf39a2be0696c5f080ca9eb9addcc98fab5ff39ac1b7f3
- MD5 8d958e443c7aae821fd3a39c2074cfe8
- SHA1 f117ed82c832a9af366cb7e284d04a195d9d91e9
- SHA512 4200cb876240d7a7083a678cd84d4f26233c8cf70285ae0ffded54e7c52dfac8b126de8d8f31dbbda3f407723c7c59884689706b7c9380b786bba608264bdeea
- SSDEEP 6144:N85NxmtFUXc4ZTfW1rN4cVZHkFbfHYy9todwcjBYw/9cCE/FxDkkDqFIXNvK:UNxMmcZ1rNPro4y9lsjkDkJuXNvK
- TLSH T100B46BA2A39227FCC1E6C3748016362DF6703F51462986A6415AF7211F37A8CAF7EF54
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
95872
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
GetModuleHandleA
CreateFileA
CloseHandle
VirtualAlloc
VirtualFree
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentProcess
LoadLibraryW
lstrcpynA
WideCharToMultiByte
lstrcpyA
lstrcatA
CreateProcessA
WaitForSingleObject
MultiByteToWideChar
lstrlenA
GetVersionExW
RtlAddFunctionTable
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcmpA
GetProcessHeap
HeapAlloc
HeapFree
GetLastError
lstrcpynW
GetModuleHandleW
ResumeThread
TerminateProcess
OpenProcess
CreateThread
GetTickCount64
GetWindowsDirectoryW
GetModuleFileNameW
VirtualProtect
WriteProcessMemory
lstrlenW
GetSystemTime
CreateEventW
SetEvent
InitializeCriticalSectionEx
lstrcatW
lstrcmpiW
CreateMutexA
CompareStringOrdinal
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CopyFileW
CreateProcessW
GetVolumeInformationA
CreateDirectoryW
SetUnhandledExceptionFilter
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
Name
.text
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.CRT
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
308KB
Virtual Size
308KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=259, version=35207,
count=4, id=260, version=35207,
count=2, id=261, version=35207,
count=3, id=257, version=27412,
count=69, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=1, id=258, version=35228,