XboxHandsVC.zip
- SHA256 7d02cc390ae4ec1ee4021c92626fcf48cb5ca4b179198faf016df894d09ec710
Password
1234
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XboxHandsVC.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
XboxHandsVC.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
General
- Target XboxHandsVC.zip
- Size 269KB
- Sample261003-3xccdagb42
- SHA256 7d02cc390ae4ec1ee4021c92626fcf48cb5ca4b179198faf016df894d09ec710
- MD5 1440864f5f88ec597e75f924d35a8845
- SHA1 a233a85a316ae04e7e5cd29884e4a9da8e2fec58
- SHA512 f9c1e9e4d46e48a797a2a558c066ecdaf754cd88fac7e484dba5ebdd6c0f616e2d56ae150472f996483cda7fa4f4ed54cdef17dc0dad4d92f7590469629ba099
- SSDEEP 6144:i42LaFofYOBB8u1zB65eiKSB+T+RAF0FLxlQuz1dQZBVg8va5L:i4Fu1l69BGuFL7r3mDg8v+
- TLSH T185442366829FB4F1DAB735B24CECF5B15A7C130E8A957057B0DC8005DD93EDE8128EA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/scripts/XboxHandsVC.asi
File Explorer
-
XboxHandsVC.zip.zip 269KB
-
anim/CSHands.dff237KB
-
anim/CSHands.txd46KB
-
anim/SLhandWF.anm10KB
-
anim/SLhandWM.anm9KB
-
anim/SRhandWF.anm9KB
-
anim/SRhandWM.anm9KB
-
data/cutscenehands.xml.xml 46KB
-
scripts/XboxHandsVC.asi.dll 294KB
anim/CSHands.dff
- SHA256 3e4b0781734daab5d889064930825490a74c38a0ce4a3d695be40ee5efbc6053
- MD5 6811729c1ffde3e484fa074ecad4a10b
- SHA1 1cc00be8f273c2b40183ac8d82737782a581bbf0
- SHA512 229dfcf5fe64b6a2a68462313a3410aefd7b7b53980260ffa7aaac7f524e665b02821adbd1c4cc7963a3c34f7530e275376d8698f8371d0b26acd3373ef501ae
- SSDEEP 3072:43Ckul1f646E64nYuHKVQJxsJPbf95WQb0+8JX8JKDKVcE648:GEPFJ9j8x5WP+8uLe
- TLSH T17034168675523AAEE4B8127AC09F8FC4E525C6556F32C73B5374A15C3DC2BFC29C2988
- MD5 SHA1 SHA512 SSDEEP TLSH
anim/CSHands.txd
- SHA256 e63686a187b561e9c924a943e8e2f63069f0855d4ea83675da4c2fe42e7d06d2
- MD5 bf820c539b3b419979033a1da3f6ab1d
- SHA1 45b9045558f2046e76160dba2ba3b88afa613bcb
- SHA512 1949462f8217d1e2395646f31e8a663f2d0f7a581402169d8326b552aea854cffe5b8d5687a7636c1b04760d7816a8d3b2267b3aea116b9f9d39cd3417009028
- SSDEEP 768:OoN/bk3zMkpSr0W2k52wW9OKsXSls2o/ls8W9eJ5FWNIpmrhTs:T/bo1pWTu9fa92icy
- TLSH T13F23D0CBDB75548CEB96A4BF68481F13E235A2D108F2C2C6E4B8D64B056B37E43AF154
- MD5 SHA1 SHA512 SSDEEP TLSH
anim/SLhandWF.anm
- SHA256 6b370f9d2568b99ffda52bba896f5cc0154b988df21a891371dd56378313ff7a
- MD5 335838989b8d6aeebe34cab39f01648e
- SHA1 4b02404d25601a996560c94ac3c874767a775b93
- SHA512 83a6581feddbdd44ab7574951307b43d8d6ed1428136926e01ec08e5099fa954c34d9dca2dc23b0042b2ccb5df458c37e3ecd0c093a4c1417fb6c6818586860e
- SSDEEP 192:pqZ+I6BznNCgaqQdQ42+plz5KvxFzL3+IsMmgTy+1:Q0nBMpfovxh3+IsOTya
- TLSH T16E226CDC4904E847E060FAB10ECCDAA735E9C2AAF5242B67C6A4793CD6476D0B47B4C2
- MD5 SHA1 SHA512 SSDEEP TLSH
anim/SLhandWM.anm
- SHA256 e8ac0f05b042ad848da38fe9d398aea3fc9e08d4bd88a617fff1b9115243d5de
- MD5 d8d26c08ee49504bd3881fb0622f8f0b
- SHA1 e6d7155397466649773aa18f59131496ddb73aca
- SHA512 17094849c25fadc9aa711f3d3b7cf04709881211f46ba94910a12a7174ebdf2279057d96d2f9a05d40206748117172a38fc8af351133035ed13c420d1e03b762
- SSDEEP 192:drjlayVVhOUjDthcZkIbC+aIG8KAP8LHlKtiMxbKQHJT0XYyYKaahT562:9j39jZhsOrAP8JRMdJpTByYo1
- TLSH T137226D54CCB06605F43CCA3C0EBED332B41E4A996A4495EE46B69D5CA347C6338FB499
- MD5 SHA1 SHA512 SSDEEP TLSH
anim/SRhandWF.anm
- SHA256 abbcf07a13e8a8b6088d593fd94c72bffc33784e28d5f2359433b7a90bfebbb9
- MD5 925e0a3682f1ebf4173ba2055951b92d
- SHA1 8368c1aa6c9a63c700ef420effb8c8108b93d325
- SHA512 e1619dbf6810a5ee19ea1ba6661881e883eb5c68772f40ddce59e8d7fa0347157e1412efed574c2497b0e9ee7149ea3147e8244ef8454d2a523939c413594bde
- SSDEEP 192:dimLnyoPiH6vZk1iJxO5bRZVuk3ieuC3eMTXO6jpXD8OlOJSIt94XDPsVF/hRmUy:cmWVH6siubvVu7e5T5vEMC9uwf/TJA
- TLSH T1B4223B7BFA174D8DF8A2A3BB217D023DB165A812C9C514D64D2DED27C08A1237CB264E
- MD5 SHA1 SHA512 SSDEEP TLSH
anim/SRhandWM.anm
- SHA256 a1135fad6ef302306885d63757bfcf63c46d2d6aa38fecdd1d52cc1764863b72
- MD5 7bd11f81fb7fde057496e6014aa92168
- SHA1 a663c196e39e812653c44ce353be5e21c054882a
- SHA512 902ff802f69ba096c8b5bb7cf9c3f74fb73bac25a37764ff7275a1a69dab05ca64d8d588d87a3d349aa900f82e00712cac5cb72b43ed700087319c7c3441ccb9
- SSDEEP 192:dCoaDTUSkG6Ga3NQZUvScTk81XrGSLBTnoijdg6hhFNp:soa2n13eCvRZrBoij7n
- TLSH T1C1225CB87A168A52E822ADBA0A9FC379347FCF27D49027E70073FD9C51C3C1168B6954
- MD5 SHA1 SHA512 SSDEEP TLSH
data/cutscenehands.xml
- SHA256 390e496f946b9dbb93857b34af82f70b028e4f51b3b0b3c2e91d8908c79ac66a
- MD5 fc42b276c2d38d369707538ea05b43c4
- SHA1 0182d1671ed5218b41d3ac18ff7fe3340a29b672
- SHA512 55b9447ffd4347c650b5592c53345abfab3a9479e37825a821a68f5c36954d49c026a13e7c6a1e8b6a155221f32bfe3b682113966f6dd060d3171ba31e7134e2
- SSDEEP 768:oLx7nraUB1JoRQAsQoQf4XQ/6kqRilMACDD7G7MqkPh:oLOCtnR
- TLSH T11423D245FA596E148A7B59935BB17CC4C27FEE2051361A0CDA84BD3BB70720CE0AD1EB
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/XboxHandsVC.asi
- IMPHASH 75d2852456ca82c12adbd3a8e99a66da
- SHA256 a7dfee3b820b8d7130087010c69c81c9dc8aaf2bf91fcdd7fec6e4e07d2d4d95
- MD5 4442d519e45d5f996106f4466a340461
- SHA1 bcb6958cd6de164c2405c7797299bcdedb31d514
- SHA512 acfed7c98d49be4d5e5f5218a1cecc6d014637db2ac1d708b9bfe18d13e84eba92cd41a64faed9c0f0e207c19185cb8abeb3d5371440f80088c2bec41c529303
- SSDEEP 6144:XvIPkut2nReu8V9zbcVcNso9LayLa7xe:fvut2nVoRjso81xe
- TLSH T106546D21B649C12ACEEE027854598EBEC23DC97007B5C5D7BB582AEA0D337E1173674B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
6
Entry point
100151
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
VirtualProtect
GetModuleHandleA
GetModuleFileNameA
GetModuleHandleExW
GetModuleFileNameW
GetModuleHandleW
CreateFileW
DecodePointer
CloseHandle
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InterlockedFlushSList
RaiseException
RtlUnwind
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
HeapAlloc
HeapFree
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
LCMapStringW
GetProcessHeap
GetStringTypeW
SetStdHandle
SetFilePointerEx
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
user32
MessageBoxA
GetActiveWindow
Name
.text
Size
193KB
Virtual Size
193KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=33136,
count=147, id=261, version=33136,
count=19, id=260, version=33136,
count=1, id=253, version=33808,
count=21, id=259, version=33808,
count=16, id=260, version=33808,
count=38, id=261, version=33808,
count=5, id=257, version=33136,
count=97, id=1, productName=Unmarked objects,
count=13, id=265, version=34120,
count=2, id=261, version=34120,
count=1, id=255, version=34120,
count=1, id=258, version=34120,