b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b.zip
- SHA256 515735431d4620d67959062613c093c786e79fd2fefe90e91bf809d131b0a41a
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
900 seconds
General
- Target b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b.zip
- Size 151KB
- Sample260827-trnc1swzhy
- SHA256 515735431d4620d67959062613c093c786e79fd2fefe90e91bf809d131b0a41a
- MD5 ce675ff67229f3a7be82cf90d3d27fe9
- SHA1 2f540f5812ae6ad648e581cae746210e982958f2
- SHA512 00d042abaea94d151488a74bf2461486753712ac77972af5a07e98a7b44ab79fcba270dfab5d749af552ee0ee8d2717e3035fdda638b8513702429b1002e095d
- SSDEEP 3072:Nr4J+vRWO4S4UZHbnw5S/z7QZXIDKJLAb4tJ2JVG4Y:iJ+f40MU7EWK69JVGJ
- TLSH T187E3132FCF08DB975F51B6721B19CFDC9126C2D813B5D4C7230E594B39DAC95A23A211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b.exe
File Explorer
-
b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b.zip.zip 151KB
-
b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b.exe.exe 406KB
b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b.exe
- IMPHASH dd2d85b2e048c4a260266fb4365fe25d
- SHA256 b77f680bf36519600963372d5a6bc7883c26ba3ba17669083b2123c534a6489b
- MD5 e9e6e925876eb3bb02f09cfc1965aacc
- SHA1 c8905cffc8022087a47343197fe8153089cbd6d7
- SHA512 d4fa5be81f2cae769119191f77e6da3f79004f7d62a1822d7ce34a100ba7af04290a5647efaa9400da3d7d87964d19a78e8573c488fb11334d0b0bf954220974
- SSDEEP 6144:KiXU4/N1hEcaiQ+GTWH/obazxU95VGYT9T:KikYbWcaivGTjV959T
- TLSH T1ED947D82B7C66DD9D2158A3589EF83293738F5E11A439F1B093472350D23AD0FE97A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
5184
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
AdjustTokenPrivileges
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
GetTokenInformation
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
gdi32
CreateFontW
CreateSolidBrush
DeleteObject
GetStockObject
SelectObject
SetBkMode
SetTextColor
kernel32
CloseHandle
CopyFileW
CreateFileW
CreateMutexW
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FreeConsole
GetCPInfo
GetConsoleWindow
GetCurrentProcess
GetCurrentProcessId
GetDiskFreeSpaceExW
GetDriveTypeW
GetFileAttributesW
GetFileSize
GetLastError
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetWindowsDirectoryW
GlobalMemoryStatusEx
InitializeCriticalSection
IsDBCSLeadByte
IsDebuggerPresent
LeaveCriticalSection
MoveFileW
MultiByteToWideChar
OpenProcess
Process32FirstW
Process32NextW
ReadFile
ReleaseMutex
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFirmwareEnvironmentVariableW
SetLocalTime
SetPriorityClass
SetSystemTime
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
fwprintf
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_time64
_unlock
_wcsicmp
abort
atexit
calloc
exit
fflush
fprintf
fputc
fputwc
free
localeconv
malloc
memcpy
memset
putchar
puts
rand
setvbuf
signal
srand
strerror
strlen
strncmp
strstr
vfprintf
wcscat
wcscmp
wcscpy
wcslen
wcsstr
shell32
SHCreateDirectoryExW
ShellExecuteExW
shlwapi
SHDeleteKeyW
user32
BeginPaint
BlockInput
CreateWindowExW
DefWindowProcW
DrawTextW
EndPaint
ExitWindowsEx
FillRect
GetClientRect
GetSystemMetrics
RegisterClassW
SetWindowPos
ShowWindow
UpdateWindow
Name
.text
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
616B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/97
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/113
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ