Armada_External_Preview_Source.zip
- SHA256 97b9fbb419272ec122853276412977448d1e857b0946d880e751931d27fed01e
Static task
static1
1 signatures
General
- Target Armada_External_Preview_Source.zip
- Size 23KB
- Sample261016-2aezbadw4p
- SHA256 97b9fbb419272ec122853276412977448d1e857b0946d880e751931d27fed01e
- MD5 d9fb9df8f5a2e195a89d02467316908c
- SHA1 f47e308afff48830cbbfe44e02d94280262e7827
- SHA512 2cbfbf5c971ff3bdd0f9ff138f86940394da31410422105a3ab32009f587f11f5c6a5d5fe3ee652ecc537f31152c8bac9ff15fc396c895e319a06b29dd2d1ba9
- SSDEEP 384:3ecp6xX7+lHuftf7Gj/YdVPUQmu6AGM8j48K6N4WGAF6bco/EprRkzzxfuWPQu3z:3d++d6zI/ocZi42WGAaReRkRfuk5YRqj
- TLSH T13CB2F1B552AF1832DF781A7EA5D5D0A3847A69980E83311FC6E87AC27D643ACC14D6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Armada_External_Preview.exe
File Explorer
-
Armada_External_Preview_Source.zip.zip 23KB
-
Armada_External_Preview.exe.exe 44KB
-
README.txt1KB
-
source/icons.h81KB
-
source/main.c14KB
-
source/make_icons.py812B
Armada_External_Preview.exe
- IMPHASH 1b97b2c2a6526732e7101607369ea035
- SHA256 ba770b2f4d4ebad9d52f18ee8adebc924f87b2b912388713991ce1585b0a484d
- MD5 00142d47c9aa5e6996987054bf5b76e1
- SHA1 9ec3da458dc79f79e691b0b46665a12b7c9fe10e
- SHA512 699f65e5d81b9068c6fba0133f6e7f14754e9eed06614c94eea8195fbf6476348ba94016f22e22993f3a6f1cb69dd88f8701f329e543ba1322de89612f751022
- SSDEEP 384:yYSdnoP5eVolAJQzks88JE7+CpZ9hdN75jqit7xlKdBRdvrDRnpe4UrLFFpp6f7j:y8P5eVozosSjpj7NVv1xeBPvrDRnZUP
- TLSH T170130F53CA95EB66D5A91232D07A61FAB226FC55FA708C0F0450BD293E7F0238D64E73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
BeginPaint
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
DrawTextW
EndPaint
FillRect
FrameRect
GetClientRect
GetMessageW
GetSystemMetrics
InvalidateRect
LoadCursorW
PostQuitMessage
RegisterClassExW
RegisterHotKey
SetBkMode
SetLayeredWindowAttributes
SetTextColor
ShowWindow
TranslateMessage
UnregisterHotKey
UpdateWindow
kernel32
ExitProcess
GetModuleHandleW
gdi32
CreateFontW
CreatePen
CreateSolidBrush
DeleteObject
Ellipse
LineTo
MoveToEx
SelectObject
StretchDIBits
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
README.txt
- SHA256 45723e90557da534fe12fcc55639864bac09e7cee082d159ce7b728dd2949e7c
- MD5 a3f830c081a79c41f28f52928fbafa9d
- SHA1 0c54cc8c1feb37bf6e1cf9a845b52c7148251fc3
- SHA512 d412028607e4062aba1a929f4ae85bffb1667b9c557311c0104c70b97135da7679f73afed0dd6fee77664dcd00b25d0012f0acf8ec5af2b6658e35dcc50a3121
- TLSH T1CB31724BBEA50350415340B8212F47D3F75BAA1FA21F036478BE01CE75F5B2246070E9
- MD5 SHA1 SHA512 TLSH
source/icons.h
- SHA256 705a27859c18e9e0ecb72acee4d0eb2bc1d17f9fc1923572635af78d119cbece
- MD5 490106734473b947f8588450317b4737
- SHA1 f6ff0b2e575d75d660124c0ad9923f63e385ed76
- SHA512 86b868ec9d015e67fe3c21d375120ed3371b41d6ac0fa7d7e54b06f0afa0d403de8509b6e3b920cd3d8ee7c85fef922defe28def24572ec23dd3d393d45e264f
- SSDEEP 192:i+ak2E+ar+r+RkMLkXAb+3+OOl+OFL+o+5+TeA+/+m+iKm+7+OOl+V/+82A4+z+D:Ly2VQqK41VdxCFU7JJH6
- TLSH T14583ECB202B55254A2B8C8C0D86B6A1DB1B1C5763676390CDB7328DDFF1D6CB807A7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
source/main.c
- SHA256 2e7afb9cfdf5a870e82b90d6c060fd3badfbaf88974e9ccaf45cb22e0f74f053
- MD5 0a2adb163adc9c22fd7085c611b9a9e4
- SHA1 6f29bbfb413cd2f0318c7afeb5f873bbb8a28890
- SHA512 e504ae780e288ac406f007830791672e09eabfdd0e0815a2e5070e1dc56f3f2a74e8f0f62f8476c8412ae99dee1144112e7a52e5d3ad661ef0f2de3c73f731e6
- SSDEEP 384:1eq11IjURKLOqMQJEo1OJ8ZWOGhMxo2Tlvno3HPltc:cq110GQJEHnhIVvj
- TLSH T139623A1559C685A8F9739371112B38D471CFD606B6CCE502B1FA291A7CAB19600FCEBE
- MD5 SHA1 SHA512 SSDEEP TLSH
source/make_icons.py
- SHA256 25f5904f04289cec240d9efb623bc57587c92ab48c780c06eb5ce7eed48be414
- MD5 58bc9e720c648d919b675f7a9e7597aa
- SHA1 2f552fe06739a4e87698c02a741ced54b705e605
- SHA512 d7e93f1257e7b246bd2ee69bd694c85d0d2f1b1295d9d49bc179e1d969a434694ce06e1e443f50b66569b620dceb4aea6235125a0724e81e1de77537529e7e88
- TLSH T1D901C2337846300D87666D623CDDD424E35BE689AB436E5E0A6D2918DC9126977C5B80
- MD5 SHA1 SHA512 TLSH