排便フィードバック用v2[.]zip

Resubmissions

02/10/2026, 12:07

261002-paembszhlf6

02/10/2026, 06:06

261002-gtvhws1bkc5

Sharing

Copy URL Twitter E-mail

General

Target
排便フィードバック用v2.zip
Size 385.2MB
Sample261002-paembszhlf
SHA256 e3916e0b352c552a8ec6563d196337e7f5d52f1e67acf5e436bf0e80487cd042
MD5 e94efbd7804dd559350082be7aea124b
SHA1 f4644e3d9ae9894d68b4430d827af68b24f3fd5c
SHA512 c5470ba6c7414198f1bd67e63573608e2e9dfc70d274283225180d8d890930312ebfb597d774c690a18920a6e16b67b284b77033c05fe59e429d02609179025c
SSDEEP 6291456:LHXQPpyrbUPujWbH3M7nToGOq7uI1g1koIqgce6+x2jgJpBMH9Z9iY/0YFXKQWwd:LHX0oqHc7E0D1yvPg6+xbrBIXwwPK2/
TLSH
T14C193399E386E0222926259AF0E3DCC558227C85014E1F36B974F9579DF3C43D898FAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FeedbackStudy.exe

File Explorer

排便フィードバック用v2.zip

.zip 385.2MB
FeedbackStudy.exe

.exe 393.9MB

排便フィードバック用v2.zip

SHA256 e3916e0b352c552a8ec6563d196337e7f5d52f1e67acf5e436bf0e80487cd042
MD5 e94efbd7804dd559350082be7aea124b
SHA1 f4644e3d9ae9894d68b4430d827af68b24f3fd5c
SHA512 c5470ba6c7414198f1bd67e63573608e2e9dfc70d274283225180d8d890930312ebfb597d774c690a18920a6e16b67b284b77033c05fe59e429d02609179025c
SSDEEP 6291456:LHXQPpyrbUPujWbH3M7nToGOq7uI1g1koIqgce6+x2jgJpBMH9Z9iY/0YFXKQWwd:LHX0oqHc7E0D1yvPg6+xbrBIXwwPK2/
TLSH
T14C193399E386E0222926259AF0E3DCC558227C85014E1F36B974F9579DF3C43D898FAF
MD5 SHA1 SHA512 SSDEEP TLSH

Password

kkjj

FeedbackStudy.exe

SHA256 0795f2e2a0305d6311e25114edae8b893a77700ef12e0c36b85dceca3cb3e51f
MD5 967aaeb1145472a958851d142268977c
SHA1 c9ab2f3de24e31e19b4322f0aeae2a8067bd60cf
SHA512 1757368d2522aa1e27ce7783916cb8ec83a79afcda2e45cefa6f04eacecc0c941d21dd4359d1106d79ba22862330c002c2a52cc04f4c2a474b5f487e0a479b60
SSDEEP 6291456:mpv9AajeWsinj5PZResTHUu2rN5ZNf5RG3VJJn3UN:WeWJkgU1rN5ZNf/uXJ
TLSH
T1481933376B442D8DD95542BA21B3CDE66BE16DAD0C9B47071E4F239B3E722481F07A0B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

kkjj

Minor OS version

Major OS version

Entry point

4708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

Name

.text

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

552KB

Virtual Size

552KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.enigma1

Size

392.5MB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.enigma2

Size

728KB

Virtual Size

728KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

排便フィードバック用v2.zip

FeedbackStudy.exe

generic