SBParry-0.2.3.zip
- SHA256 c4dc453b756e64841ebda6bf9dcec66a606e1a00e7ebf28f81f1349a16053aa5
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SBParry-0.2.3/SBParryBridge/Scripts/main.bat
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
SBParry-0.2.3/sbparry.exe
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
General
- Target SBParry-0.2.3.zip
- Size 383KB
- Sample260930-1dfjkszbkf
- SHA256 c4dc453b756e64841ebda6bf9dcec66a606e1a00e7ebf28f81f1349a16053aa5
- MD5 68c9e1ed372e152690b4f0f0d259e96a
- SHA1 f39a61ba21e5fb998221092d9634d4442c5e88b3
- SHA512 f562060ba4f1273c115809799899818148445a08a6457f6a7f11defccea4210c0d10fe572d201362e5340a942f5bd7fa9e31285007d55eae6cd2ef82e0b43739
- SSDEEP 6144:DpYLupKpYS2LWE7RhouNr6FVQVtpVlMr/nHLrf3+9FTOprR5crPJn2uIz3txRGO6:oupKpYe0RhdQzYVSvrKHcMbN8KlZ4Y0c
- TLSH T15684238ED686F121D826BCB1B8139698C0CC99550FA346BEBCC0F7135D746D65EF2688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SBParry-0.2.3/sbparry.exe
File Explorer
-
SBParry-0.2.3.zip.zip 383KB
-
SBParry-0.2.3/LICENSE.txt1KB
-
SBParry-0.2.3/README.md17KB
-
SBParry-0.2.3/README.zh-CN.md18KB
-
SBParry-0.2.3/SBParryBridge/Scripts/main.lua.bat 20KB
-
SBParry-0.2.3/sbparry.exe.exe 662KB
SBParry-0.2.3/LICENSE.txt
- SHA256 d70bc90840bca8fcc80686320f121277e38fdcaf742e270e7f9d75eb4510f5f8
- MD5 a76ce721f1c7dc1fd761b83ecd86bcb7
- SHA1 d756620ec257be23db60669dade6d96927820d65
- SHA512 99143bfbd7cfc2587111e300af1c853cf03c19071bd3e91eae2e347f1c6b9a2ddd683ddb9bf66a456deb50b75008000aa172f5ef1161cb7a7bb054f565c0f9dc
- TLSH T15011862EB25007721C9B13A09574A8C5F13BB25EBA6F2A85146DF245273A06CC5FF840
- MD5 SHA1 SHA512 TLSH
SBParry-0.2.3/README.md
- SHA256 738aae8437217bf28a35c69d408238e6b9614b36910eb510692c2126478479ce
- MD5 022b27cbb9a001ed7da827256729b9ec
- SHA1 3d01eb7dad529ea1594bcfd1b7cf8570d6e33226
- SHA512 b2699fb2f52286ff3aca2a36a49ebc395a67db9f915042e3120b3a20b510156cdd52c95890d07d15fc550605a67050a24824bdcea139e5a01431bb64e5b61097
- SSDEEP 384:aL57pNPxqN6ivXzO4xOawG3/H2KcKCFUJaE7jjm9gI5MBTip1Pp:kZ2LzZ5/IgzTinp
- TLSH T1AF82F72B3B463372467240F2534F7AD3E725C02C9B392A3098EED4087F5967A517B2E9
- MD5 SHA1 SHA512 SSDEEP TLSH
SBParry-0.2.3/README.zh-CN.md
- SHA256 13e75bae4654b20865c8ec8bfb26ea2e068e6775f164eefe6b7705a5eec4fcd4
- MD5 ee265e1cd7ed62b25c1bc1684d80d2be
- SHA1 0a5e1b39e93e73617eddc3d2a665e748522aee46
- SHA512 35819e203eb5cd266c13619ef604bdba34c93354aaf5cfe986be166b16e8cd2eca9736e230244e6f207369583148508550f71f996a4ff42d0c5ad13e7346da6d
- SSDEEP 384:kfShntZeaX98u236pGsudwVe/R+7j+l2dsI73y96eoVJXV:kfsp98u5sKe5r2pz8AJXV
- TLSH T18D824A780269FF94230220EE6B5870467184D24FFE37EF61DFAAC4247F5D79A0216A87
- MD5 SHA1 SHA512 SSDEEP TLSH
SBParry-0.2.3/SBParryBridge/Scripts/main.lua
- SHA256 86bb58ec23fa5d4b6591cd12912e95a2b56967ff5ff790899bcba07da895fae5
- MD5 26d2ebb74ae0d1a8c7024bab34ddb689
- SHA1 7fdec831d3bddf9dffd1273840923d491392bb33
- SHA512 a352232be1d44d77a9957943be07628110c4cc30c2694a3ddf3263080dff126603ab1b842a3d001100b04970262e24bac1217d0e40bd7b319d0401a118d0a08e
- SSDEEP 384:dYjMtaGDa2fkqHXCDTyI2cQg3UChDVNkpWTcBfab1rTsGCp:/taSa2NHXCDTyImg3JVNkpWTcBfaBnpE
- TLSH T17A92E94F730567F0528353A8DD870802FA34342751895669F6DE82A82FA5B2E83F7F6D
- MD5 SHA1 SHA512 SSDEEP TLSH
SBParry-0.2.3/sbparry.exe
- IMPHASH 008939cbfc8465ca21b44b2db0432783
- SHA256 6c34f947bcb6803023e7530390c574a2bd266d64bfefd77768cdf305b1a7c0aa
- MD5 7fc99bf263495bc08cc005df9cc77b3a
- SHA1 b971899522aa4e9ce345dc383a5c7b6af4f8a126
- SHA512 83c1f72a473e3bba1238831c9f4da3931edfba1dd891b29cdc49c40f657603222741e084116ba7ec020703eb624ce53e8651a9e48d7c952be3b8cb713d2f3c81
- SSDEEP 12288:rAxLZmnBnvxHCn5d5Pr59+loda7c8LHj5Bw:rCLZmnrHCn5dpD+l6Y30
- TLSH T143E48E1A679405FCE0BB90398A57A913F372740607749AEF03A046A72F2B6E85F7F711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
266812
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
MapVirtualKeyW
GetRawInputData
RegisterRawInputDevices
IsWindow
IsWindowVisible
GetForegroundWindow
GetClientRect
ClientToScreen
EnumWindows
GetClassNameW
GetWindowThreadProcessId
GetWindow
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
SendInput
DefWindowProcW
PostQuitMessage
CreatePopupMenu
DestroyMenu
AppendMenuW
TrackPopupMenu
SetForegroundWindow
GetCursorPos
LoadIconW
SystemParametersInfoW
SetProcessDpiAwarenessContext
RegisterClassExW
CreateWindowExW
DestroyWindow
ShowWindow
UpdateLayeredWindow
SetWindowPos
GetAsyncKeyState
RegisterHotKey
gdi32
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
gdiplus
GdipDeleteGraphics
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipSetTextRenderingHint
GdipCloneImage
GdipTranslateWorldTransform
GdipSetPenLineJoin
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathRectangle
GdipAddPathArc
GdipClosePathFigure
GdipResetPath
GdipDeletePath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipSetSmoothingMode
GdipScaleWorldTransform
GdipDrawLine
GdipDrawLines
GdipDrawRectangle
GdipDrawEllipse
GdipDrawPath
GdipGraphicsClear
GdipFillRectangle
GdipFillEllipse
GdipFillPath
GdipDrawImageRectRect
GdipSetClipRect
GdipResetClip
GdipSaveGraphics
GdipRestoreGraphics
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCloneFontFamily
GdipGetGenericFontFamilySansSerif
GdipGetFamilyName
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipGetStringFormatFlags
GdipSetCompositingQuality
GdipSetPixelOffsetMode
GdipSetPenColor
dwmapi
DwmFlush
shell32
ShellExecuteW
Shell_NotifyIconW
kernel32
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
GetProcessHeap
GetLocaleInfoW
LCMapStringW
CompareStringW
ReadConsoleW
HeapReAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapAlloc
GetFileType
HeapFree
CreateFileW
HeapSize
SetEndOfFile
WriteConsoleW
IsValidLocale
Module32NextW
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitProcess
WriteFile
GetStdHandle
ReadFile
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
RtlUnwindEx
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetCurrentProcessId
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
GetStringTypeW
LCMapStringEx
GetCPInfo
CompareStringEx
DecodePointer
EncodePointer
GetProcAddress
GetSystemTimeAsFileTime
DeleteCriticalSection
TryEnterCriticalSection
GetTickCount64
GetEnvironmentVariableW
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
MultiByteToWideChar
GetUserDefaultUILanguage
GetSystemDefaultLangID
CloseHandle
GetLastError
GetProcessTimes
FlushInstructionCache
OpenProcess
VirtualAllocEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
VirtualFreeEx
QueryFullProcessImageNameW
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
RtlUnwind
SetCurrentDirectoryW
GetFileAttributesW
GetFullPathNameW
SetUnhandledExceptionFilter
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
ResetEvent
WaitForSingleObject
CreateMutexW
CreateEventW
Sleep
GetModuleHandleW
CompareFileTime
GetFileAttributesExW
CreateThread
GetCurrentThreadId
GetThreadId
GetLocalTime
LoadResource
LockResource
SizeofResource
FindResourceW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
Name
.text
Size
448KB
Virtual Size
448KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
128KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=259, version=27412,
count=29, id=260, version=27412,
count=175, id=261, version=27412,
count=19, id=260, version=30625,
count=10, id=259, version=30625,
count=80, id=261, version=30625,
count=13, id=257, version=27412,
count=278, id=1, productName=Unmarked objects,
count=10, id=261, version=30709,
count=1, id=259, version=30709,
count=1, id=255, version=30709,
count=1, id=258, version=30709,