Vison FREE.zip
- SHA256 aec1200137a6098bdb80911c605fb3cc96e6ae2661063bddc65b2d103a2b2aa4
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vison FREE.exe
Resource
win11-20260911-en
windows11-21h2-x64
7 signatures
150 seconds
General
- Target Vison FREE.zip
- Size 39.9MB
- Sample261012-th4nmscv51
- SHA256 aec1200137a6098bdb80911c605fb3cc96e6ae2661063bddc65b2d103a2b2aa4
- MD5 aa33e6df8e2614cecb83e35c92f45c2d
- SHA1 8def15953c6af06324dea30db35327f793388b11
- SHA512 91565dff0c688d4d80f02ced0a300e61313cc8f8dd08afc23f93d5977a2c2c8074c2ff3f7ba389e895a7fe0d3cc30083a3d619606ab989ee44924b6967b8ad17
- SSDEEP 786432:R2e/Z1R4ZYQX1isRyrtk57iZpx7Q7Q9LOQ756bcMNhx6ntgLKcOTROa44X65BWmX:MY6XQsRyJk58SINUVNf3ecqROa44SBVX
- TLSH T1299733CE3C4046C95E8932EE5BCD44393632584BABAD8B57D7CDECA0B940A548FAD5CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Vison FREE.exe
File Explorer
-
Vison FREE.zip.zip 39.9MB
-
Vison FREE.exe.exe 55.7MB
Vison FREE.exe
- IMPHASH e37e8564ef473dd6731d8e8117611ca7
- SHA256 a8baa2ce08a0403c19abbc54305f631c93b26801d29557222b16130fedeba610
- MD5 eb32aac0bbde3ea535bb4347f1edebec
- SHA1 b016cb148203018af390904314c66da14c9eaf86
- SHA512 6bf40edf67d414171959ae61b8534471cf3784950d6e4f6e98e4a176397e3cdefe7f2ddd66204b1d8dac37824b8f6367dc2669b93d16fd74d50aa59f5ffb3e4c
- SSDEEP 1572864:28mB2M/cXUxijtJfyQEDw0OwvNImoPakMvJW:QIdE4fyQE8kBrv
- TLSH T15CD7BD3162A1CD7FC246673C8741EA3C12C48ED0AD11D68281F5F96BAE3BB817D856DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
23165593
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
FindFirstFileW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetActiveWindow
gdi32
CreateCompatibleBitmap
advapi32
RegQueryValueExW
shell32
SHGetFolderPathW
ole32
CoCreateInstance
crypt32
CryptStringToBinaryA
msvcp140
??1facet@locale@std@@MEAA@XZ
shlwapi
PathRemoveFileSpecW
winhttp
WinHttpSetOption
bcrypt
BCryptFinishHash
dwmapi
DwmSetWindowAttribute
gdiplus
GdipSaveImageToStream
imm32
ImmSetCompositionWindow
d3dcompiler_47
D3DCompile
d3d11
D3D11CreateDeviceAndSwapChain
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
api-ms-win-crt-stdio-l1-1-0
fgetc
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-string-l1-1-0
isspace
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-time-l1-1-0
_mkgmtime64
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
780KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
876KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.FN+
Size
Virtual Size
19.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.d]U
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.JQX
Size
25.6MB
Virtual Size
25.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
30.2MB
Virtual Size
30.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ