BO1_LAN_Fixv15.zip
- SHA256 8347a0063f180ea1f9ce85802c40ca0c74fb74c2a93acebd45093272ac23e71e
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BO1_LAN_Fixv15/MilesBO1Tool.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target BO1_LAN_Fixv15.zip
- Size 6.4MB
- Sample261006-zzy3daez8v
- SHA256 8347a0063f180ea1f9ce85802c40ca0c74fb74c2a93acebd45093272ac23e71e
- MD5 8f93ed9bce8f0d28fe0225f61a3ab960
- SHA1 88774370713fe587b4f10d210e118716de2db71f
- SHA512 e2eb5cd111bed6d9b8b9c42564500fe52fb1399d4856db9dd10c91e52b6b383fcff2f3bd68ac57870653d110be37ed019f7b235e8c34c617ef461b501666650b
- SSDEEP 196608:gB0Q8vQrsi2ku0clskwVIynaD3mrNr/u339G:g2ljo1cls3+W1/Ew
- TLSH T1F46633AF7053336DF015E9FFBB03B170E0C482951F42480F29A6D3A6EA1E89B5456ED9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BO1_LAN_Fixv15/MilesBO1Tool.exe
File Explorer
-
BO1_LAN_Fixv15.zip.zip 6.4MB
-
BO1_LAN_Fixv15/MilesBO1Tool.exe.exe 11.5MB
-
BO1_LAN_Fixv15/payloads/ps4debug.bin3.0MB
-
__MACOSX/BO1_LAN_Fixv15/._MilesBO1Tool.exe207B
-
__MACOSX/BO1_LAN_Fixv15/payloads/._ps4debug.bin207B
BO1_LAN_Fixv15/MilesBO1Tool.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 69fe6e97294a395d29de03f2da1eec5b2215d4ea75614870af50956d7cf23962
- MD5 870ac804e600589b735078b8a240367c
- SHA1 0868fc357a1f80950dd1af6cdb486ce7baae8b7e
- SHA512 86eade5ccbdf4b76a31ea1daa51adf7644ac39436947cbe90c4c93f1f0f038fdf3c27c72fbdd2556539798b06d03eae581e1431037f38cb4593cbfe69522e115
- SSDEEP 98304:pgrBDOOD+iirkEHBZpog9dz/5gN7yFdS/L1uYk+FF90yBCIdaF/B9YvH13kY:NG+iiB6+em+Fo4CqszMH9kY
- TLSH T1FFC64B07B85188A9C1A982309DABC7A67A717C454F3223D73B90B3BD2F767C46B79740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
478176
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3.2MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
332B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
484KB
Virtual Size
483KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
106KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
851KB
Virtual Size
850KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
638KB
Virtual Size
638KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/90
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
419KB
Virtual Size
418KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
BO1_LAN_Fixv15/payloads/ps4debug.bin
- SHA256 28829f48465d3dfdf97afc15f01edafd8802f8213c44635af6f21e0e8b48c8f6
- MD5 9fa31d193b46aa774a6f56dcaef4974f
- SHA1 470945b5b822d34dae5429319720ec34ec21fbe8
- SHA512 3f140ce7f5f7a53cd07abcb6100b4ae4b0e2713e40306eb636620ddc2903ec8ea545fe060213aaf028814c84cdcea4aa03d7c677c6df71a30addde51c37c4065
- SSDEEP 24576:PhN7yFWwScz4tf9Xl9axXyBuJBkq0pf8vk7jDHfLz3XvnKgtCutG1u+KWan:PhN7yFWwSi6fNlIxXYuJmkv0
- TLSH T124E57216B111DC6DC2384234BCCBCBB83B717CA48D625707379473EE5F762892B69A86
- MD5 SHA1 SHA512 SSDEEP TLSH
__MACOSX/BO1_LAN_Fixv15/._MilesBO1Tool.exe
- SHA256 ed8ee0fbf5175f31cd74e270cd27910673a9a6716580709ab3cbd80e9ffc0a81
- MD5 0b32b0ae166a4c52f7714c64da50347a
- SHA1 11234abee3c4ff75126cf57921358f3882bfdde8
- SHA512 33db47aa550b7bc84b40dea752cacfc33a6f4df6c6a26278dec2131550102b05a4e6ffadacf046e759f51d7f9c5f7c3c2d6044cc4e399575000bde192c867e90
- TLSH T10CD08C10A1C28882C88100BC24F25802B035A45A01C38212B26DC2002B40A217A903AA
- MD5 SHA1 SHA512 TLSH
__MACOSX/BO1_LAN_Fixv15/payloads/._ps4debug.bin
- SHA256 ed8ee0fbf5175f31cd74e270cd27910673a9a6716580709ab3cbd80e9ffc0a81
- MD5 0b32b0ae166a4c52f7714c64da50347a
- SHA1 11234abee3c4ff75126cf57921358f3882bfdde8
- SHA512 33db47aa550b7bc84b40dea752cacfc33a6f4df6c6a26278dec2131550102b05a4e6ffadacf046e759f51d7f9c5f7c3c2d6044cc4e399575000bde192c867e90
- TLSH T10CD08C10A1C28882C88100BC24F25802B035A45A01C38212B26DC2002B40A217A903AA
- MD5 SHA1 SHA512 TLSH