Software_MS-DOS 6.22 Floppy Images.zip
- SHA256 87d942388b11a8781031a9f357921e0171f76b234d0ed0212396e3b0c733871f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Software_MS-DOS 6.22/Software_MS-DOS 6.22/WinImage 9.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Software_MS-DOS 6.22/Software_MS-DOS 6.22/WinImage 9.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Software_MS-DOS 6.22 Floppy Images.zip
- Size 5.1MB
- Sample260916-wqmq7stdrc
- SHA256 87d942388b11a8781031a9f357921e0171f76b234d0ed0212396e3b0c733871f
- MD5 d1f6929e975e541dd5d9ab3cd6f9cd68
- SHA1 e7b675057265a229dedfd31be1593ad33dbd54c0
- SHA512 5af09778d4bd2d82eb8933b0f541a6914d866dddd718d713e6222f62828a0eed93d888c8a30e636ea05c85dec73259b1eb2e5ee14947258b1fee69b742d675ee
- SSDEEP 98304:spN2hJ5+mPnpEw2UsDwaruPCQnYdlJPTlnOO5RUZKlk4b/JcwmT9qeglh:wN25LKwaDwayKkYvBTlnOOP7JmT8J
- TLSH T1ED3633CBA7F0542376B5F5703190F55073866D4AF5A67E26E5E90482E802BC7C08BEBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Software_MS-DOS 6.22/Software_MS-DOS 6.22/WinImage 9.exe
File Explorer
-
Software_MS-DOS 6.22 Floppy Images.zip.zip 5.1MB
-
Software_MS-DOS 6.22/Software_MS-DOS 6.22/MS-DOS 6.22 Disk 1 Setup.IMA1.4MB
-
Software_MS-DOS 6.22/Software_MS-DOS 6.22/MS-DOS 6.22 Disk 2.IMA1.4MB
-
Software_MS-DOS 6.22/Software_MS-DOS 6.22/MS-DOS 6.22 Disk 3.IMA1.4MB
-
Software_MS-DOS 6.22/Software_MS-DOS 6.22/MS-DOS 6.22 Supplemental Disk.IMA1.4MB
-
Software_MS-DOS 6.22/Software_MS-DOS 6.22/WinImage 9.exe.exe 851KB
Software_MS-DOS 6.22/Software_MS-DOS 6.22/MS-DOS 6.22 Disk 1 Setup.IMA
- SHA256 c6ab28ebda17a00f51d5e0ed6dfac90cd7dc93f533910fc3035fabcf34bef52b
- MD5 15e0439466f6e39a30cab8ac0d5a7942
- SHA1 4a8422865dac62a5e106d61828a0ccab41a09c7c
- SHA512 2311c2043f6561eefc7d64590cabda5f8533b19f77fcfca57a3f280dcc9ca52d7fa3c983901eac22a8f4a746d1144cf5367aa9db56303b658251fbe68eb7836d
- SSDEEP 24576:M795WFBoIP3dJhxdl9eSzMoZQkyP+TqpVw9jyJYNQKjWqO9aH41Sfveg1O:PPtJhuSgoqks+TqpVwOYNnWb9atVO
- TLSH T1F765024ADF4AFF20D572C139193F51A6F72B61201769010A36FCA19C9736788F37EA4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Software_MS-DOS 6.22/Software_MS-DOS 6.22/MS-DOS 6.22 Disk 2.IMA
- SHA256 3a36b959e84e601659f5554717c81cf2d576f3ba843446fae7ee6273db7dd4ec
- MD5 44701afcc03a2c3c9dc8b83506d3cb2f
- SHA1 de83ae346e51ee85eac9ff2f331f2449b6c9c605
- SHA512 09cc304135dfb5945e250630457e9001bd0bceae8e03b4988cb1a831286f03b36f9a40d6f5bbfa1935f443cddcd10b99e8c2552841a62f715f2762e550c4991d
- SSDEEP 24576:vcsuztKUUf6EI29s17FUdEg/KZpWFKqZtO13kSoQRhVkgs8dP9D3YNJo:YUf6EIUdP/KbWYsI31bRjzxFCG
- TLSH T12165232FB9E9BF20CFA19A36893C8D9213578AF1B579548C9B74CD08C302C0B759676D
- MD5 SHA1 SHA512 SSDEEP TLSH
Software_MS-DOS 6.22/Software_MS-DOS 6.22/MS-DOS 6.22 Disk 3.IMA
- SHA256 52a3b4e7f5973c38f2517dbb20426bf5c8bd62f202e84a85d3d7283401d5e63c
- MD5 c41dca1ec654b231c97c576e05035b4b
- SHA1 06de13364e906c4ed69f19627ae0e682eb419078
- SHA512 7848344b90258596d943586816f63b36d895e8ab521da7c627ccec8cafb7e1d4459073bdc177d7cf0875741d069eb959f78c5e4068e860d0106327e59fb391f6
- SSDEEP 24576:RmhkNpX+V3I5GLedR3jOMZJajVxxC3CYlbLhwrUsATA0jmTE6MIfImekFsJ5sib:Y0R+R4GIRJ4RT2bLhwZATxjHm3FmFb
- TLSH T1C66523E78E66BCB7DB20177D96B12ADCCD8BA365477A00306525524E0B8DD00FD9AB0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Software_MS-DOS 6.22/Software_MS-DOS 6.22/MS-DOS 6.22 Supplemental Disk.IMA
- SHA256 b35c47c1f6c54616f31332f4535993824c79a448273ae466122af66fb725ed01
- MD5 d6e7ccba2644bbeffd79c89e9b45c27c
- SHA1 2e839c428a0dc2cc55d3a245cc113843ee349feb
- SHA512 787e2002955d43d702fc8acac69252e75e7694fdbf95cc171307ea7dafdcdd554c677a06b4b9f285cd0adad63077313ed5f2d1ce21f298977616cf558ae99df1
- SSDEEP 24576:ycKOBGKtnSMOBp3IdVdCf9BAnQTiWjjV48N:lKOBGe49Bkca8N
- TLSH T15A6523DF640EBF12E87A6BBF6DB00F10E7425062652C5636707F46409F9CED1BA986C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Software_MS-DOS 6.22/Software_MS-DOS 6.22/WinImage 9.exe
- IMPHASH 61589d57189bface34a9100fbe4acaab
- SHA256 293ae1f7d9693abf0d218e846af92f7e4eda8e1e2cee297ba03d816e14eab8ee
- MD5 06fc47097ed79262ae3811d2b71073b7
- SHA1 a6c3ad565eb08f826648abf4fadae3d05b77d018
- SHA512 a86cc68a1e9e5f4fcf7766d2b55a4faa32d283fecb2f4a1f45d17be9496a90ccd2a261ad7e2c51df56c8a2a819806587e063d27a1b44b5812d6d399d112aaf5c
- SSDEEP 12288:Z1YcBNwNylwSm+RqsP0ipcCyKYvk7+MUKlwY8E5s5KeK2QVwS+C5sG6IMVdO:kwyyZqKpUKYvGz5s50LyXgS9y
- TLSH T17805234163E8008AE1F19E38E9B1CB06FF707C061E39AB2F5259549DDF63B4DD814B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
1e:ab:02:19:3c:95:bf:d0:26:6a:29:0f:bf:c0:83:9b:29:94:88:db
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Gilles Vollant,O=Gilles Vollant,L=Savigny sur Orge,ST=Ile de France,C=FR
Chains
Apr 23, 2013
CN=Gilles Vollant,O=Gilles Vollant,L=Savigny sur Orge,ST=Ile de France,C=FR
Subject
CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign
Serial Number
04:00:00:00:00:01:20:19:c1:90:66
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 18, 2009 - Jan 28, 2028
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE
Serial Number
01:00:00:00:00:01:25:b0:b4:cc:01
Issuer
CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 21, 2009 - Dec 22, 2020
Subject
CN=Gilles Vollant,O=Gilles Vollant,L=Savigny sur Orge,ST=Ile de France,C=FR
Serial Number
11:21:b6:79:65:c6:51:67:d7:8d:3b:e5:4b:40:da:42:df:21
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 28, 2011 - Jun 28, 2013
Minor OS version
2
Major OS version
5
Entry point
39088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
msvcrt
_initterm
__setusermatherr
_commode
memcpy
__getmainargs
_acmdln
exit
_cexit
_exit
_c_exit
_XcptFilter
__C_specific_handler
strncpy
strcpy
strlen
_mkdir
malloc
free
strcmp
atoi
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
memset
_fmode
__set_app_type
comctl32
PropertySheetA
kernel32
GetStartupInfoA
DeleteFileA
CreateFileMappingA
lstrcmpiA
ReadFile
WriteFile
UnmapViewOfFile
OutputDebugStringA
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
GlobalHandle
lstrlenA
WaitForSingleObject
FormatMessageA
CreateProcessA
lstrcatA
CreateDirectoryA
GetLastError
GetVersion
lstrcpyA
FindFirstFileA
FindClose
FindNextFileA
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
CopyFileA
lstrcpynA
FindResourceA
FreeResource
LoadResource
GetCurrentProcess
GetNumberFormatA
SizeofResource
MultiByteToWideChar
LockResource
GetDiskFreeSpaceA
CloseHandle
GetFullPathNameA
lstrcmpA
GetModuleFileNameA
GlobalReAlloc
DosDateTimeToFileTime
CreateFileA
SetFileTime
GetFileTime
LocalFileTimeToFileTime
SetFilePointer
MapViewOfFile
user32
TranslateMessage
PeekMessageA
DispatchMessageA
RegisterClassA
LoadCursorA
SetWindowLongPtrA
ShowWindow
SetWindowPos
DefWindowProcA
ReleaseDC
CreateWindowExA
GetDC
SendMessageA
GetWindowLongPtrA
DestroyWindow
EnableWindow
PostMessageA
GetDlgItem
GetParent
SetDlgItemTextA
MessageBoxA
CharPrevA
CharNextA
wsprintfA
LoadStringA
SetCursor
FindWindowA
IsWindow
LoadIconA
GetMessagePos
GetDlgCtrlID
UpdateWindow
GetSysColorBrush
InvalidateRect
PtInRect
BeginPaint
GetClientRect
DrawTextA
KillTimer
SetClassLongPtrA
RegisterClassExA
ScreenToClient
SetTimer
EndPaint
IsDlgButtonChecked
CheckDlgButton
CharUpperA
GetDlgItemTextA
gdi32
SetTextColor
CreateFontIndirectA
SetBkMode
SelectObject
GetStockObject
DeleteObject
CreateDIBitmap
GetObjectA
advapi32
RegQueryValueExA
GetTokenInformation
OpenProcessToken
RegQueryValueA
RegCreateKeyA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
shell32
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=154, id=1, productName=Unmarked objects,
count=3, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=29, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,