MV 2.7.1 version-2366ba214ec740ca FIXED.zip
- SHA256 978bb18559b1602d798833ba4125e2615caed7880a1b84ce5e1ba88c34cb906f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eurotrucks2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
eurotrucks2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
General
- Target MV 2.7.1 version-2366ba214ec740ca FIXED.zip
- Size 21.5MB
- Sample260930-vq5fkstenb
- SHA256 978bb18559b1602d798833ba4125e2615caed7880a1b84ce5e1ba88c34cb906f
- MD5 b983d0ba55561aacfd89b80c24de2981
- SHA1 ef0b289fa777c5e11b0024b9146fbd1b1435634c
- SHA512 9f6ee30149936d7f9fda65653e8a465d3b3670645b1c508a8a229e1b716322616aaad2a9fa23f793ddbf8d263f0fe412253647116a57bb7242cea883ad3377e6
- SSDEEP 393216:RkLRGR1N90trLGwvEAONHMHtHG44oTHQJ3ANyfY92diRyrEmgs:mVqqlvFOdMw6Hm3AsfY92diRQ
- TLSH T194373321C7C672ACC766B6FD867487C3480CBC969BB152A4944C61F941AE41BEECBC4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eurotrucks2.exe
File Explorer
-
MV 2.7.1 version-2366ba214ec740ca FIXED.zip.zip 21.5MB
-
eurotrucks2.exe.exe 24.7MB
eurotrucks2.exe
- IMPHASH fea2ca86f4ed97526e98624668176f53
- SHA256 6986d9162e0c7ae490da4777b90bb021cbd61cbffe5ae37856021979b5edf5fd
- MD5 4316831af14181c4b902b4ab98bf7bbc
- SHA1 9b7991a668387433bde78329f53592e8c8e3d611
- SHA512 9ccd01ed36363e1ab1e392541b28cd06c60f20f5d4d1df2640eaea1233456c3beae370fa3f925e56ea39d784a2c6f3d51e1466397e9f6335dfa286989f2b936c
- SSDEEP 393216:B1ude8+WR1y5lrPinJfKkpcC+rz49fFS4u0nH0PavSKZRIs52bIxkY:B1t8+Wjc6zpT+f4WiHNvSKZRIk2bIx
- TLSH T1CD4723E769D522E5D393CE08D3CB238A83C271A6EAE78A1D39C664031571C93DB45D3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
19805320
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
./.\kernel32
ReadConsoleW
./user32
GetKeyState
.\shell32
ShellExecuteW
.\./msvcp140
?always_noconv@codecvt_base@std@@QEBA_NXZ
.\d3d11
D3D11CreateDeviceAndSwapChain
././d3dcompiler_47
D3DCompile
.\./dwmapi
DwmSetWindowAttribute
./avrt
AvSetMmThreadCharacteristicsW
./pdh
PdhOpenQueryW
./imm32
ImmSetCandidateWindow
.\./vcruntime140_1
__CxxFrameHandler4
.\.\vcruntime140
__current_exception_context
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-string-l1-1-0
towlower
api-ms-win-crt-time-l1-1-0
_localtime64_s
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
api-ms-win-crt-filesystem-l1-1-0
_lock_file
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
log
kernel32
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
Name
Size
Virtual Size
498KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
149KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Q3r
Size
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.j&#
Size
Virtual Size
764B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.&A;
Size
Virtual Size
14.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.:E>
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Yto
Size
24.7MB
Virtual Size
24.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ