865f16471d7edcc551afb809883d415536a4b35df3af4e2d3aed97aed77e2bfb.bin.zip
- SHA256 865f16471d7edcc551afb809883d415536a4b35df3af4e2d3aed97aed77e2bfb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Application.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Application.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
cli.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
cli.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
skey.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
skey.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 865f16471d7edcc551afb809883d415536a4b35df3af4e2d3aed97aed77e2bfb.bin.zip
- Size 476KB
- Sample261006-kqaabsvblh
- SHA256 865f16471d7edcc551afb809883d415536a4b35df3af4e2d3aed97aed77e2bfb
- MD5 5c347016f97d9f5947c4bae7865c0e0b
- SHA1 8e4bbd4c18684c804138fc365fd3d0ca68d8c322
- SHA512 ac70a52d7c3e2bdcab3164dd62fceb76053f647d1b0ec5629eca46d3ba09adcc37455344dc14eee80339558cce1bc61264a8c7aa15649440538dbde23bddc591
- SSDEEP 12288:+SCDe0U+m1V6ECbniSPfS3e2R3feeintFckqTsuC8hHw:+De0wUTiSWzeeiKsP8dw
- TLSH T109A42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cli.exe
File Explorer
-
865f16471d7edcc551afb809883d415536a4b35df3af4e2d3aed97aed77e2bfb.bin.zip.zip 476KB
-
Application.bat24B
-
cli.exe.exe 742KB
-
skey.txt.js 179KB
Application.bat
- SHA256 3cae4e4a6deb09aefea50648e5cf6dc1883bca97936b80243aaf8f578344211f
- MD5 c86f840f2e1db9dd38d900ceea588706
- SHA1 a08f88e9a53511bba97b79fcb981ff9b3d1b498c
- SHA512 fbd72508558ed7c7423e686f7e0a2a170c0d540255d0d80c9bafffaef52b047ca4ca85c10163a6c46ca92e4a2ed1610b9ae5c3b01515eb1033bf4b9ad61ae330
- MD5 SHA1 SHA512
cli.exe
- SHA256 c434ce8620057d9dd9073b4af8382bf27e85729d152164909f1052775e7ddc70
- MD5 e18a0f07a55738e880b46d4a22deca5d
- SHA1 e73ee451f2e97e0802b2ab00115539ecf24fd76d
- SHA512 6fd3fe5e1db110d3af055919f9935fa4e6cdbc6e46c0cdb2fbd4779d8e8328338788fe28e11201172f609a03cbd5468b48a35bef6559739c52c0cfdb1d54de17
- SSDEEP 12288:qFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:qFs4FZnKsrLdiCUMs/KiesyYA
- TLSH T1DCF4BF81B6D381F3D992117148B9A77A0E3D6D1007259CEB83D43AF68D346C0AF776AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
383313
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\a\defold\defold\share\ext\luajit\tmp_win32\LuaJIT-3e223cb8a41cff3b92931acb846af7b67a5d2537\src\luajit.pdb
__swprintf_l
__vswprintf_l
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fscanf_l
_fscanf_s_l
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwscanf_l
_fwscanf_s_l
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfscanf_l
_vfscanf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vfwscanf_l
_vfwscanf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscanf_l
_vscanf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsnwscanf_l
_vsnwscanf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vsscanf_l
_vsscanf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vswscanf_l
_vswscanf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_vwscanf_l
_vwscanf_s_l
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wscanf_l
_wscanf_s_l
fprintf
fprintf_s
fscanf
fscanf_s
fwprintf
fwprintf_s
fwscanf
fwscanf_s
printf
printf_s
scanf
scanf_s
snprintf
sprintf
sprintf_s
sscanf
sscanf_s
swprintf
swprintf_s
swscanf
swscanf_s
vfprintf
vfprintf_s
vfscanf
vfscanf_s
vfwprintf
vfwprintf_s
vfwscanf
vfwscanf_s
vprintf
vprintf_s
vscanf
vscanf_s
vsnprintf
vsnprintf_s
vsprintf
vsprintf_s
vsscanf
vsscanf_s
vswprintf
vswprintf_s
vswscanf
vswscanf_s
vwprintf
vwprintf_s
vwscanf
vwscanf_s
wprintf
wprintf_s
wscanf
wscanf_s
Name
.text
Size
620KB
Virtual Size
619KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=55, id=259, version=33145,
count=205, id=261, version=33145,
count=26, id=260, version=33145,
count=3, id=257, version=33145,
count=110, id=1, productName=Unmarked objects,
count=26, id=259, version=35207,
count=18, id=260, version=35207,
count=38, id=261, version=35207,
count=1, productName=Unmarked objects (old),
count=68, id=260, version=35225,
count=1, id=256, version=35225,
count=1, id=258, version=35225,
skey.txt
- SHA256 73f3c4ae76c086f962a06d790be6cc104a47c9d1bfcaebd12eebb3455b090660
- MD5 ee7bb4c0c17a6e4ca7d625ff7c42d6e5
- SHA1 704ab265d16b56afc1bcdcb1079153ddf8d2a1ab
- SHA512 6909cad37e5226bb855d5893ab06b4d2fee9b26fb9302c8f7a5841835721a7bf5e9e954fba385ba69cbfd4cc6adcc57f1544ae69007345f14178953e1c1bbeac
- SSDEEP 1536:HgciD4953RsqR7rrdv/Bta2L1SvbzkBCpOLZ2tjO/P2BUiOvwTyI00h6m+TZliPz:HgELBsqpL1SUMEaukcmlonJbXwFxjj
- TLSH T1D2047395988A1CBADDEB8990EC977A9B34F380F4070D564B0F65D0A936F1260DBDCC1E
- MD5 SHA1 SHA512 SSDEEP TLSH