FreeEdge-Setup_Password-(5151).rar
- SHA256 95e93a8580b8ebb82a49b2e093918cb4ebc29d0e3dd55b046f61d903c01d4b4f
Password
5151
Static task
static1
1 signatures
General
- Target FreeEdge-Setup_Password-(5151).rar
- Size 3.4MB
- Sample261006-ycdmgsty5j
- SHA256 95e93a8580b8ebb82a49b2e093918cb4ebc29d0e3dd55b046f61d903c01d4b4f
- MD5 a09f8b1a773c66d5e7c7c15c791a66ec
- SHA1 0c1753e5f487c4623e645cb35101455b50740122
- SHA512 196a064cd74bc1cceeae8c7f065b8fc2bc2cacb60f0da0c98d3569153d3d0169578987ff4bd1eea205b4a587df175bdb355d2bec6adc09b528f2e271641dbfa6
- SSDEEP 98304:/cMBxo8sRDh2wOA3UzFL9jlZq1UvgL9IZshhb+u/R+Z:/57403AIvjlwUvgB9Bx5q
- TLSH T184F5331F5E474B6C8B22B9E6830C19D27C53C4764E04A9C546E73F70902D82B9A9DFAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Setup.exe
File Explorer
-
FreeEdge-Setup_Password-(5151).rar.rar 3.4MB
-
Password 5151.txt4B
-
Password.txt16B
-
READ ME.txt66B
-
Setup.rar.rar 473KB
-
Setup.exe.exe 990KB
Password 5151.txt
- SHA256 236e5fcfd21603c33b82ddd89bab7c428ed18e3830bf04af0ec7f80ea63124a7
- MD5 717d8b3d60d9eea997b35b02b6a4e867
- SHA1 c71ce8327ddb80f5f2d66ef497a4c2f2ed295a15
- SHA512 c4a36a1b84dc99b13cc12bf2e371c7a92bde87354d55f830cd5e82db25d7598ba06a6532920476f951ce30197884f6a40fb07acba1e05ab541f8023c9c0f0072
- MD5 SHA1 SHA512
Password.txt
- SHA256 4eaab416c6686db4baffb63e5c3dd96aaee6cacf0834ed2653d05800efd76488
- MD5 e6e000f0dd9aafa09768feccad512548
- SHA1 39288ef0e818bc980fd72c09f479d95b1db4281f
- SHA512 2cfcf94a1d81acf083c88f0c41045d3cef456596ee221297bf070df1c9dd144c0957b92535ad75c6d2ac7f39d14d09cf1ae45bf04aad50ba05e9c18f40d073e3
- MD5 SHA1 SHA512
READ ME.txt
- SHA256 1bfa03bbf836efe73bf824dd447791c99fe5c0adfa36011de5562a3b3f8928db
- MD5 2964325e994f3af6e0bdf3cdd2b5154d
- SHA1 55d7d195d9feaa306633d0ba3ab7a86db759214e
- SHA512 a9a74cecb1b7c3ddcf76518f64a33d26593e8d5e6978cf842121e0089d5684465e192c48b63f10845a8ef8c839382881431b06e77a8e7d78982a6e39acfae5a8
- TLSH T15DA0110A0C8F22AA020220A8820808C23328800080F2A200B0288AA82220EBA828008E
- MD5 SHA1 SHA512 TLSH
Setup.rar
- SHA256 747fe4c820e3f5746d7c66866d2164e8e473b240fde196db72328009867d51e2
- MD5 7b18c46b338cd6aa324dbb017a959ddd
- SHA1 fc7f47d8adb6e448b070e2ad3fb116689bef5d90
- SHA512 b5d3f00faab20d6133628dbe0fdb16d4f69f03012797720e25927036208b74774f9ad0c9e0858e8bb1464c79a18eb409c9c185bb740f2dcde410ff37ea168490
- SSDEEP 12288:nqE80jp0CsnScWqkw8SVUNfpAsoXAKjI1Eq+X36Bety:a20ZS7HwrONRAsweyq+aBety
- TLSH T12FA4232D0FCF9937865126EB9F7865C45CF1830C48B0A69DAF9AEA410017E97706DCBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
5151
Setup.exe
- IMPHASH bad3910e9fe2acbf31c683f582509238
- SHA256 3f3c36086fb80897ce5eb14373188c0f200721581bb11db35f38d3e251f2a689
- MD5 bdf7fbd490315491007207008b245d98
- SHA1 27c473d032ec2161cf559f71d568ada5ad4b0c0a
- SHA512 8e9a339f6e0ef0bcf92ed9c22eac37d6b0b0efed7f7b412f7f2221535152a143cac04397afbf3735a80242450d1494648f044ee74be51038659e6cc1ed06a071
- SSDEEP 12288:3JnJCTl2KqtbF/u85E43tA+gJj1y6j/Jf8Q4fiInnfoMiz:5nJpcctAlJj1tjxf8ViInnAMiz
- TLSH T153252A5E1B895CB7F1D4AE314D99B0386B3398A04BD968E610CC3E57EF23ED615F1A02
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
5151
Minor OS version
0
Major OS version
6
Entry point
68992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
eclujamix.pdb
user32
BeginPaint
DrawTextW
EndPaint
FillRect
GetActiveWindow
GetDesktopWindow
GetFocus
GetForegroundWindow
GetShellWindow
InvalidateRect
UpdateWindow
kernel32
CloseHandle
CompareStringW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetActiveProcessorCount
GetActiveProcessorGroupCount
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileType
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempPathW
GetThreadId
GetWindowsDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
IsDBCSLeadByte
IsDebuggerPresent
IsProcessorFeaturePresent
IsThreadAFiber
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
gdi32
Rectangle
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
ntdll
NtReadFile
NtWriteFile
Name
.text
Size
125KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
574KB
Virtual Size
573KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
241B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
273KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ