v2.8.zip
- SHA256 bca2395593ce421bf63e69ca8c60267551386848adc291a1f8b9979c546b225a
Static task
static1
1 signatures
General
- Target v2.8.zip
- Size 475KB
- Sample260901-3w1ctafd39
- SHA256 bca2395593ce421bf63e69ca8c60267551386848adc291a1f8b9979c546b225a
- MD5 235e29655f9139e20eb6a4c97c50e6a1
- SHA1 dc94d8b342b33d6a52df5459b75f009b1cc06f08
- SHA512 1e39bcf91a67f94fb21e0a4f15e5de5195e85431b9a7b810fa01a41d863db2fb28710c02e3757801a3a04f14b49a6ba13b6dc698fced51186d43ad2b940912a4
- SSDEEP 12288:rcqSCDe0U+m1V6ECbniSPfS3e2R3feeintFckl:FDe0wUTiSWzeeil
- TLSH T195A4239581B983533484E3B5497B1AEA5F301CF28D3D674F89DAC5F80B74E8887EA252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/zen.exe
File Explorer
-
v2.8.zip.zip 475KB
-
Application.bat23B
-
key.txt.js 175KB
-
zen.exe.exe 742KB
Application.bat
- SHA256 f4b650190b3f58c234df08e505bd956565105f647101c3c7c84f80563840187b
- MD5 99b03fefda112b2baad970414e82c5a5
- SHA1 af1531593a37f020316740180dd224977a667c20
- SHA512 b161a6ff7ca9094783d8399fc458f570ec173ad343ca99021bd3b63cdf7b22e6508ba8b53dddf59041862d95c05233585fdd9a26a10e413cf37ffbd46387cad5
- MD5 SHA1 SHA512
key.txt
- SHA256 b56bbedccf2ba6b38ca96eeb5f12541fdded9a148579194f748fc3d5c86b33d4
- MD5 82404d36c986361257f06fb1fe431f43
- SHA1 c2ef8788e0683efeeaac5991d9518a65cf739597
- SHA512 4b6460f71118a6ae0d1e244ff28b175c62f99aefc726894679911c479c8e8e109fbb5b3f242978d3e8d8830a41352b30fd2d021ecc220bac0856382d66c261f5
- SSDEEP 1536:g9WHnShxe579oY/SMWtpZKX1mxJhv79mGbR9agyTNaCoDnb92Ifcdv6iCyd1eknc:gxxaqM7Fmz9a3pau7IydxTH4
- TLSH T1B2045291D18E6CBFD5DF8190EC97A9AB34B781E4470D176B0F10E0A836B2164E7ED81B
- MD5 SHA1 SHA512 SSDEEP TLSH
zen.exe
- SHA256 c434ce8620057d9dd9073b4af8382bf27e85729d152164909f1052775e7ddc70
- MD5 e18a0f07a55738e880b46d4a22deca5d
- SHA1 e73ee451f2e97e0802b2ab00115539ecf24fd76d
- SHA512 6fd3fe5e1db110d3af055919f9935fa4e6cdbc6e46c0cdb2fbd4779d8e8328338788fe28e11201172f609a03cbd5468b48a35bef6559739c52c0cfdb1d54de17
- SSDEEP 12288:qFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:qFs4FZnKsrLdiCUMs/KiesyYA
- TLSH T1DCF4BF81B6D381F3D992117148B9A77A0E3D6D1007259CEB83D43AF68D346C0AF776AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
383313
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\a\defold\defold\share\ext\luajit\tmp_win32\LuaJIT-3e223cb8a41cff3b92931acb846af7b67a5d2537\src\luajit.pdb
__swprintf_l
__vswprintf_l
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fscanf_l
_fscanf_s_l
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwscanf_l
_fwscanf_s_l
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfscanf_l
_vfscanf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vfwscanf_l
_vfwscanf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscanf_l
_vscanf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsnwscanf_l
_vsnwscanf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vsscanf_l
_vsscanf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vswscanf_l
_vswscanf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_vwscanf_l
_vwscanf_s_l
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wscanf_l
_wscanf_s_l
fprintf
fprintf_s
fscanf
fscanf_s
fwprintf
fwprintf_s
fwscanf
fwscanf_s
printf
printf_s
scanf
scanf_s
snprintf
sprintf
sprintf_s
sscanf
sscanf_s
swprintf
swprintf_s
swscanf
swscanf_s
vfprintf
vfprintf_s
vfscanf
vfscanf_s
vfwprintf
vfwprintf_s
vfwscanf
vfwscanf_s
vprintf
vprintf_s
vscanf
vscanf_s
vsnprintf
vsnprintf_s
vsprintf
vsprintf_s
vsscanf
vsscanf_s
vswprintf
vswprintf_s
vswscanf
vswscanf_s
vwprintf
vwprintf_s
vwscanf
vwscanf_s
wprintf
wprintf_s
wscanf
wscanf_s
Name
.text
Size
620KB
Virtual Size
619KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=55, id=259, version=33145,
count=205, id=261, version=33145,
count=26, id=260, version=33145,
count=3, id=257, version=33145,
count=110, id=1, productName=Unmarked objects,
count=26, id=259, version=35207,
count=18, id=260, version=35207,
count=38, id=261, version=35207,
count=1, productName=Unmarked objects (old),
count=68, id=260, version=35225,
count=1, id=256, version=35225,
count=1, id=258, version=35225,