MDE_File_Sample_0d65305fae28a387b40b3a456e61e5f6aa2d415b.zip
- SHA256 43b1ca7f0e02b9b7320f864328f8da675ef80fa0f86509edb7fcc17857c5fb84
Password
test
Static task
static1
Behavioral task
behavioral1
Sample
0d65305fae28a387b40b3a456e61e5f6aa2d415b.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
20 signatures
900 seconds
Behavioral task
behavioral2
Sample
0d65305fae28a387b40b3a456e61e5f6aa2d415b.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
13 signatures
900 seconds
General
- Target MDE_File_Sample_0d65305fae28a387b40b3a456e61e5f6aa2d415b.zip
- Size 450KB
- Sample260925-x4gmsavdpb
- SHA256 43b1ca7f0e02b9b7320f864328f8da675ef80fa0f86509edb7fcc17857c5fb84
- MD5 30efbb60afabffd41551972133057fc7
- SHA1 beae5b3aa1fb3ff6ab4a3c7a60dfb8ca41db5f64
- SHA512 e3026bde85801dfca42725c6b21818f5d83c5ba47b06c900d5b7f649bfe5768d49eea349142a54b1618d66e76668d64783a341120ba17c38f1e6bcee048aa4f0
- SSDEEP 12288:cBMOAemFPiHcvMFupfoLyMuhmzIiE303W+rH2aP:+jAemFPiHw+upA2hMy0vrWaP
- TLSH T18EA423EC6BC6D8C2E3AB97F060279346C6AB412190396CEBF710853C7DE93775A44AC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
MDE_File_Sample_0d65305fae28a387b40b3a456e61e5f6aa2d415b.zip.zip 450KB
-
0d65305fae28a387b40b3a456e61e5f6aa2d415b.exe 796KB
0d65305fae28a387b40b3a456e61e5f6aa2d415b
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 133758e8668c62b76a3bb316679387038e3e57b3e4c4becf3bafe12f82bf7bdf
- MD5 d75f1257f8583af7121240890ab2d72f
- SHA1 0d65305fae28a387b40b3a456e61e5f6aa2d415b
- SHA512 27b79173e22b58fbb1d8c11dbecef1c1c53cd3a20b9b5b94689d31f080a07865edbf41c768be606def8dfc24b127287602d57471a02b5179e4b0b9f3e8a9e741
- SSDEEP 12288:hDVL+7JSjDPQ9khNcp3IjE/Y5C9+Xy34lYhOsfzGP3K:+7WIAcpYjgY492y3wMO06P3K
- TLSH T1CB059E906BF84019E7BF5F76B4B248168B75F903A8B9E7AE4794509E2CE13038D24377
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
test
Digest
66:0d:31:09:bf:65:bc:24:52:22:a4:45:e8:26:02:c4:ed:96:f0:ae:ff:df:43:7a:52:f8:6e:80:a5:ba:80:af
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 18, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Marketplace CA G 024,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:55:44:ee:97:76:41:31:34:bc:30:8e:00:01:00:55:44:ee
Issuer
CN=Microsoft Marketplace CA G 024,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 17, 2026 - Aug 20, 2026
Subject
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:44:a2:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 28, 2011 - Mar 28, 2031
Subject
CN=Microsoft Marketplace CA G 024,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:58:e5:87:3d:5c:f5:75:e4:14:00:00:00:00:00:58
Issuer
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 11, 2024 - Apr 11, 2029
Subject
CN=Dummy certificate
Serial Number
01
Issuer
CN=Unknown issuer
Key Usages
KeyUsageCertSign
Ext Key Usages
Timespan
Jan 1, 2013 - Apr 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:21:33:c0:35:fb:d2:0f:21:a4:00:01:00:00:02:21
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
733538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb
mscoree
_CorExeMain
Name
.text
Size
708KB
Virtual Size
708KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ