Melting.zip
- SHA256 ebbfe99f9be30859d9948d905222769c8f8d690158e1baaaad14088e39adf282
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Melting.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Melting.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Melting.zip
- Size 5KB
- Sample260930-ev1p7ass5n
- SHA256 ebbfe99f9be30859d9948d905222769c8f8d690158e1baaaad14088e39adf282
- MD5 ae4a137eef84b98bc738841d96250d1b
- SHA1 c45131c966c8f7780a21c8565a1937568b23d144
- SHA512 89e1137f659300df7a556925ff21dc8d32e32ca057692e9da7ecdc8b92205f63667e61653b06226ecf2a81455c55a6d2d6369b6ba088fa33702ee8d677c56642
- SSDEEP 96:KtGnx4Rs6Z3f7yWB350za0NcNeuCBB3nqFgREdA9Syq+3cm2ieHaDIWqB/KiTf8F:KtGnx0s6ZT4a0q2B9nqORKqqQYHaDIW/
- TLSH T1DCC17EBD593AB49DF52FA1F24D6E33DC0D141369034D49831C3DAA04BB796E18D05D27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Melting.exe
File Explorer
-
Melting.zip.zip 5KB
-
Melting.exe.exe 12KB
Melting.exe
- IMPHASH 5960e4006cf3e48c7ac35cbf00addbb1
- SHA256 92a284981c7ca33f1af45ce61738479fbcbb5a4111f5498e2cb54931c8a36c76
- MD5 833619a4c9e8c808f092bf477af62618
- SHA1 b4a0efa26f790e991cb17542c8e6aeb5030d1ebf
- SHA512 4f231fc16339d568b5cf9353133aeae835eb262dab68bc80d92f37b43df64dce4fae0e913cbaa3bb61351a759aeecf9d280bc5779b0853c980559a654d6cca11
- SSDEEP 192:0TVtyoHzIj5dzyKa7gyh5QzpMm74ysT55tfoUK:utpTIj5dO52/HsTu
- TLSH T128423C07BB5305EDDA27C1F5D0730E06E5BA75204722768F87B162A21E93242B9A76CD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5636
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Domas\Desktop\ScreenMelter\x64\Release\ScreenMelter.pdb
kernel32
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
TerminateProcess
GetTickCount
user32
RegisterClassW
PeekMessageW
SetTimer
ValidateRect
PostQuitMessage
ReleaseDC
DispatchMessageW
ShowWindow
GetSystemMetrics
GetDC
TranslateMessage
LoadCursorW
KillTimer
CreateWindowExA
DefWindowProcW
gdi32
BitBlt
vcruntime140
memset
__C_specific_handler
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_initialize_onexit_table
_c_exit
_initterm
_get_narrow_winmain_command_line
_register_onexit_function
_initialize_narrow_environment
_initterm_e
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_cexit
exit
terminate
_exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=17, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=7, id=257, version=24610,
count=62, id=1, productName=Unmarked objects,
count=1, id=265, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,