SE2011.zip
- SHA256 b5709775f60e44bb0e75a944f2ebfca09567bc3b8df8c80de9b55c18ee7be9a3
Static task
static1
1 signatures
windows10-2004-x64
3 signatures
150 seconds
windows11-ltsc_2024-x64
22 signatures
150 seconds
General
- Target SE2011.zip
- Size 2.2MB
- Sample260930-fxfngavybx
- SHA256 b5709775f60e44bb0e75a944f2ebfca09567bc3b8df8c80de9b55c18ee7be9a3
- MD5 69ff073256a026da4ec11976d0fbf30a
- SHA1 972effdb5658ee0f47751bf879d08f336dba44e6
- SHA512 34eb9eaa35cb2fe60da7ab5c4d28eb8cd60f31fe4c0966cb93f1b94a01c0f654da490ee640668648230d82efe63955d03ef0fdc7c0a627faa48c7b51d7639629
- SSDEEP 49152:QvbnCoOFqdEnjPJlPrs6Jqf08rrRN5srnmogA9vee5G:QvbnCoOFqunjPJljXJNk3Grm6ee5G
- TLSH T1D8B533A2DB0B32312AD39070D22403FA8A764F5B2143365D759632BCF50D97B535BEAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/[email protected]
File Explorer
-
SE2011.zip.zip 2.2MB
-
[email protected].exe 2.4MB
- IMPHASH 7b4879f52b9e13826e55497b8a5033c3
- SHA256 36619636d511fd4b77d3c1052067f5f2a514f7f31dfaa6b2e5677fbb61fd8cba
- MD5 02f471d1fefbdc07af5555dbfd6ea918
- SHA1 2a8f93dd21628933de8bea4a9abc00dbb215df0b
- SHA512 287b57b5d318764b2e92ec387099e7e313ba404b73db64d21102ba8656636abbf52bb345328fe58084dc70414c9e2d8cd46abd5a463c6d771d9c3ba68759a559
- SSDEEP 24576:CEwbO4PqokXfEP5lJSHlxfGe9pkDda1ei/o+HapablRA9h9nNf3cfxRt5Q469DTd:amokPClGZ9MWwL73KzTaTn6nX2gEeFvE
- TLSH T19BC52352E120C98AD828B1F0E91696B60A1B7CAF55650E6F20B43F1D75B3503DC2FDAF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
6886655
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
gdi32
GetObjectW
CreateBitmapIndirect
ExtEscape
CreateDCW
GetCharWidth32W
GetBitmapDimensionEx
GetArcDirection
CreateRectRgn
SetBkColor
ExtCreatePen
DeleteDC
PlayEnhMetaFile
SetTextColor
DeleteObject
CreatePen
SetTextAlign
CreateSolidBrush
SelectPalette
kernel32
LoadLibraryA
WriteConsoleA
MoveFileExA
GetComputerNameA
lstrlenW
SizeofResource
GetTickCount
WaitForSingleObject
GetShortPathNameW
IsValidLocale
GetProfileSectionA
GetHandleInformation
FindAtomW
WaitForDebugEvent
TlsSetValue
GetSystemTimeAdjustment
TlsAlloc
HeapFree
GetOEMCP
InitAtomTable
GetModuleHandleW
ReleaseMutex
ReadFile
TlsFree
GetAtomNameW
AddAtomW
lstrlenA
GetTempPathA
HeapValidate
HeapAlloc
GetAtomNameA
GetConsoleHardwareState
GetStartupInfoA
SetFileAttributesA
GetVolumeInformationA
TlsGetValue
IsDBCSLeadByte
GetSystemDirectoryA
OpenEventW
lstrcpynA
psapi
EnumProcessModules
EnumProcesses
GetModuleFileNameExA
GetModuleBaseNameW
user32
EnableScrollBar
BeginPaint
ScreenToClient
InvalidateRgn
TranslateAcceleratorW
InsertMenuA
IsIconic
DrawMenuBar
GetSysColorBrush
GetFocus
IsWindowUnicode
TranslateMessage
ValidateRect
SetMessageQueue
ReleaseDC
DispatchMessageW
GetMessageW
MoveWindow
IsWindowVisible
GetClientRect
EndPaint
CopyRect
GetScrollPos
GetWindowRect
DrawTextA
CharToOemA
CloseWindow
IsWindowEnabled
GetDC
CopyImage
advapi32
SetSecurityDescriptorSacl
OpenEncryptedFileRawW
RegCreateKeyA
StartServiceCtrlDispatcherA
dbghelp
SymFunctionTableAccess
SymGetModuleInfoW
SymGetOptions
msvcrt
_vsnprintf
fread
ftell
strrchr
toupper
wcscspn
ntdll
strcpy
memset
JxhPlrtnbwuvxh@4
_Append_Text_Value@12
RvwUlnjfrvAnj@8
HttJefedtqlhmlpx@16
_Clear_DataText@8
UwqYofBgyHjd@8
Name
.code
Size
Virtual Size
6.6MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
137B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
466B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=72, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,