UselessDisk.bin.zip
- SHA256 311188716ae8bd0016f8104cb162a7e7103047e3883c116225ee169d1a40fa64
Password
infected
Static task
static1
1 signatures
General
- Target UselessDisk.bin.zip
- Size 33KB
- Sample261014-dffk2axwf1
- SHA256 311188716ae8bd0016f8104cb162a7e7103047e3883c116225ee169d1a40fa64
- MD5 b544d78a09013f03c57c4acf816f65d7
- SHA1 ad304ab3c083e515ecef1d649e53f54116fef272
- SHA512 19cf7480914d9838e574b03eb25080a439c7027f712ac04e80f01a92b9cbf152a4e77449cb6b302c9acd6800cba606944d439223f4391b63a290482a7d34187b
- SSDEEP 768:mCNajLTjEDBtMrjxVTZ9j2kPwrSUsR6ghYF2Geoo+HQ12N2biFsdC:HN87E9kxVlvP8SUsR6lF2GdN22N2bUss
- TLSH T15AF202B1D02A81C4CFB2BF98B976A170863098855C49529BB873F6659FAB4F0D1EDC24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/UselessDisk.bin
File Explorer
-
UselessDisk.bin.zip.zip 33KB
-
UselessDisk.bin.exe 176KB
UselessDisk.bin
- IMPHASH 71189d4f0d27eac3d2f5ff41a1d38403
- SHA256 bf664370a287f83a67eb9ec01d575cad3bcdfbec2e2290a5e8d570999566e79e
- MD5 577be8c5b73e59fb71570f632349e5fe
- SHA1 363605836bf4ee34d9dfb43a6e71acdfd2b2cebe
- SHA512 1eae9f2176fa4067ba3311aff1ddb3715bd797e51869c52e9c96c5d7f84d9b43f52769d194ea8e95c2a17c21d97371a58368ccabc268e62dbed84ba59c1adaf6
- SSDEEP 1536:wNx32nZ7n9Ji4+IrLFAAi524020CVdDATOwt77X0goavwiv:w/2nR9Ji4+IrLW240FCVBATEgoavP
- TLSH T1CC043C31EA81C06AF5D381F9D2E6CBFAB5286F32134410C7D3E4B99A572D4F56D3184A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
5728
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
ExitProcess
CloseHandle
WriteFile
DeviceIoControl
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetLastError
GetFileAttributesA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
WinExec
Name
.text
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=14, version=7299,
count=70, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=19, version=8034,
count=60, id=1, productName=Unmarked objects,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,