6d9de1b1fdae50a607d7e98d341677fceff933d9a6044478481379864862e47d
- SHA256 6d9de1b1fdae50a607d7e98d341677fceff933d9a6044478481379864862e47d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Quarantine Zone The Last Check - Trainer (+10) {Void}.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quarantine Zone The Last Check - Trainer (+10) {Void}.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 6d9de1b1fdae50a607d7e98d341677fceff933d9a6044478481379864862e47d
- Size 1.8MB
- Sample260826-vrtepsgp8z
- SHA256 6d9de1b1fdae50a607d7e98d341677fceff933d9a6044478481379864862e47d
- MD5 eefa9362c87242a1b292f66d4a14d67c
- SHA1 e4afe9e4d48e3bd47fb81871611ebf3bf5bbc502
- SHA512 01de5731288d87b408e45ea78fa8a5ae2931fe3895dfd85b38935ff9f1b275a217c4a0978d1ec10b4dad1d2339c25a97c57d0ad2553c396a968de46a944c4bc7
- SSDEEP 49152:GlLqMEqm40LG2Q/RjkBDIzf59Xnjdz69OlnjpMg1g:GlLfOLwjUD6R9XjdDp5g
- TLSH T1B195330CE89F4C04CD1458B15E2F7EA6BB1AED7949A2F5E239B7098D15F8F02683D1C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Quarantine Zone The Last Check - Trainer (+10) {Void}.exe
File Explorer
-
6d9de1b1fdae50a607d7e98d341677fceff933d9a6044478481379864862e47d.zip 1.8MB
-
Quarantine Zone The Last Check - Trainer (+10) {Void}.exe.exe 4.2MB
Quarantine Zone The Last Check - Trainer (+10) {Void}.exe
- IMPHASH 1dd454b24e5b82c7c29232da4941ca0c
- SHA256 b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c
- MD5 2af76a74cd29432a2d30c3665ad706a2
- SHA1 f2c295adeeb63458b58fd19fd4a3c282412c0943
- SHA512 63e2ea9fd971f421a0601c190b963267c7da9d6b2ba5f761eaede5be23466de9e92a781e8cefe227bd091ce048fce934296cb518c778f73426235bb61747cc4a
- SSDEEP 98304:6PfxS/9RqHkbpDPNCPPPt111sqd/6TGOl7R+5:8JS/9RqHW5PNCPPPt111se/uGOo
- TLSH T164167C4BAEB30C9DC43E7078CD577916E672BC0C5670564B5AB8F6F0AE732601A1AE13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
13:ce:4c:36:e9:3c:4a:54:ac:cf:8c:c3:4d:67:78:74:13:f6:01:3f:9e:9a:3e:0d:5e:24:38:39:19:8c:79:99
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d
Chains
Aug 26, 2026
CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d
PE Signature issue
Digest
52:26:d1:82:1d:e2:b3:f8:6e:11:15:12:fa:ab:43:31:e2:72:28:c6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d
Chains
Aug 26, 2026
CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d
Subject
CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d
Serial Number
17:0b:3d:50:5b:5c:56:9f:44:c0:c2:0e:c9:6c:0b:87
Issuer
CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 26, 2026 - Dec 31, 2039
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
2092208
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
winmm
PlaySoundA
timeEndPeriod
timeBeginPeriod
kernel32
GetCurrentThreadId
GetModuleHandleW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreW
ExitProcess
TerminateProcess
GlobalMemoryStatusEx
GetSystemInfo
RaiseException
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
CreateThread
GetCurrentThread
SetThreadPriority
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GetLocaleInfoW
SetThreadExecutionState
QueryPerformanceCounter
QueryPerformanceFrequency
CreateEventW
Sleep
LoadLibraryW
CreateFileA
GetTickCount
IsWow64Process
EnumResourceNamesW
HeapFree
GetProcessHeap
VerSetConditionMask
DeviceIoControl
GetOverlappedResult
CancelIo
ResetEvent
FormatMessageW
VerifyVersionInfoW
GetCommandLineW
HeapAlloc
GetModuleFileNameW
LoadLibraryExW
LocalFree
WaitForMultipleObjects
FormatMessageA
GetFileTime
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileExW
GetConsoleMode
GetFileAttributesExW
GetLogicalDrives
RemoveDirectoryW
CopyFileExW
MoveFileExW
FlushFileBuffers
SetHandleInformation
CreatePipe
SetNamedPipeHandleState
GetExitCodeProcess
CreateProcessW
GenerateConsoleCtrlEvent
MulDiv
SetEvent
GlobalSize
CompareStringA
GetModuleHandleExW
GetSystemPowerStatus
GetLocaleInfoA
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
SetConsoleCtrlHandler
IsProcessorFeaturePresent
FreeLibraryAndExitThread
ExitThread
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
GetStringTypeW
GetCPInfo
CompareStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
LCMapStringEx
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReadConsoleW
VirtualProtect
CreateFileW
LoadLibraryA
WriteConsoleW
AttachConsole
OutputDebugStringW
GetStdHandle
SetErrorMode
GetLastError
WriteFile
SetFilePointerEx
SetFilePointer
ReadFile
GetFileType
FindNextFileW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
UnhandledExceptionFilter
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
VirtualQueryEx
VirtualFreeEx
CreateDirectoryA
ReadProcessMemory
VirtualAllocEx
VirtualProtectEx
GetFileSizeEx
CloseHandle
Process32Next
CreateToolhelp32Snapshot
OpenProcess
GetSystemDefaultLangID
GetModuleHandleA
Module32First
WaitForSingleObject
Module32Next
GetCurrentProcess
WriteProcessMemory
Process32First
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
MultiByteToWideChar
OutputDebugStringA
HeapSize
SetEndOfFile
DuplicateHandle
RtlUnwind
SetStdHandle
user32
RemovePropW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetClipCursor
ClipCursor
IntersectRect
PtInRect
SetWindowLongW
SetParent
SetWindowsHookExW
UnhookWindowsHookEx
CreateIconFromResource
GetQueueStatus
RegisterClipboardFormatW
GetClipboardSequenceNumber
SystemParametersInfoW
SystemParametersInfoA
DrawTextW
SetFocus
GetDlgItem
EndDialog
DialogBoxIndirectParamW
EnumWindows
GetDesktopWindow
PostThreadMessageW
GetMessageW
RegisterRawInputDevices
GetRawInputData
IsWindow
CreateIconIndirect
SetPropW
ReleaseDC
RegisterClassW
SetWindowLongPtrW
GetWindowLongPtrW
SetForegroundWindow
SetMenuItemInfoW
GetMenuItemInfoW
TrackPopupMenu
DeleteMenu
InsertMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
CreatePopupMenu
CreateWindowExW
RegisterWindowMessageW
DestroyWindow
SetActiveWindow
EnableWindow
GetClipboardFormatNameA
FlashWindowEx
SetLayeredWindowAttributes
ShowWindow
AttachThreadInput
CreateIconFromResourceEx
DestroyCursor
LoadCursorW
SetCursorPos
CreateWindowExA
UnregisterClassA
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetMessageA
GetRawInputDeviceList
GetRawInputBuffer
GetRawInputDeviceInfoA
GetMonitorInfoW
MonitorFromWindow
MonitorFromPoint
DestroyIcon
ReleaseCapture
SetCapture
LoadIconW
CallNextHookEx
GetWindowLongW
SetRectEmpty
FillRect
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetPropW
ValidateRect
GetUpdateRect
EndPaint
EnumDisplayMonitors
EnumDisplayDevicesW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
ToUnicode
GetKeyboardState
GetKeyboardLayout
SetWindowRgn
IsClipboardFormatAvailable
BeginPaint
GetDC
GetForegroundWindow
GetMenu
GetSystemMetrics
KillTimer
SetTimer
MsgWaitForMultipleObjects
MapVirtualKeyW
GetKeyState
IsZoomed
IsIconic
GetWindowPlacement
SetWindowPos
GetClassInfoExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
SendMessageW
GetMessageExtraInfo
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
TranslateMessage
TrackMouseEvent
RegisterWindowMessageA
GetDoubleClickTime
MessageBoxA
GetWindowThreadProcessId
GetFocus
GetWindowLongPtrA
SetWindowLongPtrA
FindWindowA
GetAsyncKeyState
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
EnumClipboardFormats
RegisterClassExA
gdi32
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
CombineRgn
GetTextMetricsW
CreateCompatibleBitmap
CreateDCW
GetDIBits
GetPixelFormat
GetICMProfileW
BitBlt
GetTextExtentPoint32A
GetDeviceCaps
CreateFontIndirectW
CreateDIBSection
SetPixel
SelectObject
DeleteDC
CreateCompatibleDC
CreateBitmap
CreateRectRgn
CreateSolidBrush
DeleteObject
comdlg32
GetOpenFileNameA
advapi32
LookupPrivilegeValueA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
shell32
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
DragAcceptFiles
SHGetFolderPathW
CommandLineToArgvW
Shell_NotifyIconW
DragFinish
DragQueryFileW
SHGetKnownFolderPath
ole32
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
OleUninitialize
OleInitialize
CLSIDFromString
PropVariantClear
RevokeDragDrop
RegisterDragDrop
oleaut32
SysFreeString
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmGetIMEFileNameA
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetCompositionFontW
ImmNotifyIME
ImmSetCandidateWindow
d3dcompiler_47
D3DCompile
setupapi
CM_Get_Parent
CM_Get_Device_IDA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
CM_Locate_DevNodeA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
??4?$StaticObject@UVersions@detail@cereal@@@detail@cereal@@QEAAAEAV012@AEBV012@@Z
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
755KB
Virtual Size
755KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
750KB
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
424KB
Virtual Size
424KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=35215,
count=36, id=259, version=35215,
count=1, id=253, version=35721,
count=10, id=259, version=35721,
count=18, id=260, version=35721,
count=92, id=261, version=35721,
count=68, id=260, version=35215,
count=1, id=262, version=35215,
count=218, id=260, version=36248,
count=24, id=261, version=36248,
count=29, id=257, version=35215,
count=415, id=1, productName=Unmarked objects,
count=7, id=265, version=36248,
count=1, id=256, version=36248,
count=1, id=255, version=36248,
count=1, id=151,
count=1, id=258, version=36248,