New folder (3).zip
- SHA256 0dd7238d7a6fef33db6194a82667f69b7bd49d9fe08f9a3469e9e13af4fffc33
Overview
overview
8Static
static
3New folder...2).exe
windows10-2004-x64
8New folder...3).exe
windows10-2004-x64
8New folder...4).exe
windows10-2004-x64
3New folder...5).exe
windows10-2004-x64
8New folder...6).exe
windows10-2004-x64
8New folder...7).exe
windows10-2004-x64
8New folder...py.exe
windows10-2004-x64
8New folder...67.exe
windows10-2004-x64
8Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
New folder (3)/dsadsa67 - Copy (2).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
New folder (3)/dsadsa67 - Copy (3).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
New folder (3)/dsadsa67 - Copy (4).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
New folder (3)/dsadsa67 - Copy (5).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral5
Sample
New folder (3)/dsadsa67 - Copy (6).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral6
Sample
New folder (3)/dsadsa67 - Copy (7).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral7
Sample
New folder (3)/dsadsa67 - Copy.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral8
Sample
New folder (3)/dsadsa67.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target New folder (3).zip
- Size 640KB
- Sample261024-xwtmda1v2k
- SHA256 0dd7238d7a6fef33db6194a82667f69b7bd49d9fe08f9a3469e9e13af4fffc33
- MD5 60f3396b63ec7ba2a6c3422757327eb1
- SHA1 b0d0a1fbb32e36b27255bb9572fe08503475aae4
- SHA512 7b3269d0f979229df207c6d11951b7b1cee8d2865a1257e86937dd6af0bed71261a21f9bbfba1e0c5ed9b5c6f0ca3bdb66796d6c3792379018d3ce4c59c8e8a0
- SSDEEP 12288:BAiS3SAiS3EAiS3LAiS3XAiS3QAiS3CAiS3EAiS39:BXS3SXS3EXS3LXS3XXS3QXS3CXS3EXSN
- TLSH T1E3D412845068D91EE257C3662A1D391EBAC3716E2983BC0C7AF285EBD2430B347DD57E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/New folder (3)/dsadsa67 - Copy (2).exe unpack001/New folder (3)/dsadsa67 - Copy (3).exe unpack001/New folder (3)/dsadsa67 - Copy (4).exe unpack001/New folder (3)/dsadsa67 - Copy (5).exe unpack001/New folder (3)/dsadsa67 - Copy (6).exe unpack001/New folder (3)/dsadsa67 - Copy (7).exe unpack001/New folder (3)/dsadsa67 - Copy.exe unpack001/New folder (3)/dsadsa67.exe
File Explorer
-
New folder (3).zip.zip 640KB
-
New folder (3)/dsadsa67 - Copy (2).exe.exe 130KB
-
New folder (3)/dsadsa67 - Copy (3).exe.exe 130KB
-
New folder (3)/dsadsa67 - Copy (4).exe.exe 130KB
-
New folder (3)/dsadsa67 - Copy (5).exe.exe 130KB
-
New folder (3)/dsadsa67 - Copy (6).exe.exe 130KB
-
New folder (3)/dsadsa67 - Copy (7).exe.exe 130KB
-
New folder (3)/dsadsa67 - Copy.exe.exe 130KB
-
New folder (3)/dsadsa67.exe.exe 130KB
New folder (3)/dsadsa67 - Copy (2).exe
- IMPHASH 7524ad565ac5f58f97b4d8aec4bd51c6
- SHA256 3a5da3572f2862af3e282bdaf1b2a16a031104db2488267fe8472710e2c2d9e9
- MD5 00b986d65686456999e2a2713cd51631
- SHA1 2aa6b3f701f62046901b364772f8fff04fc30220
- SHA512 ba440d1a6680b0137fb251a6e8b69b4df96f761f09a1867a9eb378e30e61b09474b5c355b26c0e24ed7297acc6a4c32da9e317081599af10e97595c9c3ed60ab
- SSDEEP 3072:hLvGqHnesdKOvJAMGVWAGSgEGHrwC0jsMqBqSGK+tqenvL:FHnes1+MGVBBhnjD
- TLSH T14AD38D5FA3E530F9E177963884A10A45E776B43207609FEF07E4025A2F276D18D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
wsprintfA
mscoree
CLRCreateInstance
oleaut32
SafeArrayCreate
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
kernel32
TerminateProcess
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetTempPathA
CloseHandle
CreateProcessA
GetTickCount
VirtualAlloc
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=39, id=261, version=35721,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=7, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,
New folder (3)/dsadsa67 - Copy (3).exe
- IMPHASH 7524ad565ac5f58f97b4d8aec4bd51c6
- SHA256 3a5da3572f2862af3e282bdaf1b2a16a031104db2488267fe8472710e2c2d9e9
- MD5 00b986d65686456999e2a2713cd51631
- SHA1 2aa6b3f701f62046901b364772f8fff04fc30220
- SHA512 ba440d1a6680b0137fb251a6e8b69b4df96f761f09a1867a9eb378e30e61b09474b5c355b26c0e24ed7297acc6a4c32da9e317081599af10e97595c9c3ed60ab
- SSDEEP 3072:hLvGqHnesdKOvJAMGVWAGSgEGHrwC0jsMqBqSGK+tqenvL:FHnes1+MGVBBhnjD
- TLSH T14AD38D5FA3E530F9E177963884A10A45E776B43207609FEF07E4025A2F276D18D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
wsprintfA
mscoree
CLRCreateInstance
oleaut32
SafeArrayCreate
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
kernel32
TerminateProcess
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetTempPathA
CloseHandle
CreateProcessA
GetTickCount
VirtualAlloc
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=39, id=261, version=35721,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=7, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,
New folder (3)/dsadsa67 - Copy (4).exe
- IMPHASH 7524ad565ac5f58f97b4d8aec4bd51c6
- SHA256 3a5da3572f2862af3e282bdaf1b2a16a031104db2488267fe8472710e2c2d9e9
- MD5 00b986d65686456999e2a2713cd51631
- SHA1 2aa6b3f701f62046901b364772f8fff04fc30220
- SHA512 ba440d1a6680b0137fb251a6e8b69b4df96f761f09a1867a9eb378e30e61b09474b5c355b26c0e24ed7297acc6a4c32da9e317081599af10e97595c9c3ed60ab
- SSDEEP 3072:hLvGqHnesdKOvJAMGVWAGSgEGHrwC0jsMqBqSGK+tqenvL:FHnes1+MGVBBhnjD
- TLSH T14AD38D5FA3E530F9E177963884A10A45E776B43207609FEF07E4025A2F276D18D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
wsprintfA
mscoree
CLRCreateInstance
oleaut32
SafeArrayCreate
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
kernel32
TerminateProcess
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetTempPathA
CloseHandle
CreateProcessA
GetTickCount
VirtualAlloc
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=39, id=261, version=35721,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=7, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,
New folder (3)/dsadsa67 - Copy (5).exe
- IMPHASH 7524ad565ac5f58f97b4d8aec4bd51c6
- SHA256 3a5da3572f2862af3e282bdaf1b2a16a031104db2488267fe8472710e2c2d9e9
- MD5 00b986d65686456999e2a2713cd51631
- SHA1 2aa6b3f701f62046901b364772f8fff04fc30220
- SHA512 ba440d1a6680b0137fb251a6e8b69b4df96f761f09a1867a9eb378e30e61b09474b5c355b26c0e24ed7297acc6a4c32da9e317081599af10e97595c9c3ed60ab
- SSDEEP 3072:hLvGqHnesdKOvJAMGVWAGSgEGHrwC0jsMqBqSGK+tqenvL:FHnes1+MGVBBhnjD
- TLSH T14AD38D5FA3E530F9E177963884A10A45E776B43207609FEF07E4025A2F276D18D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
wsprintfA
mscoree
CLRCreateInstance
oleaut32
SafeArrayCreate
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
kernel32
TerminateProcess
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetTempPathA
CloseHandle
CreateProcessA
GetTickCount
VirtualAlloc
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=39, id=261, version=35721,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=7, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,
New folder (3)/dsadsa67 - Copy (6).exe
- IMPHASH 7524ad565ac5f58f97b4d8aec4bd51c6
- SHA256 3a5da3572f2862af3e282bdaf1b2a16a031104db2488267fe8472710e2c2d9e9
- MD5 00b986d65686456999e2a2713cd51631
- SHA1 2aa6b3f701f62046901b364772f8fff04fc30220
- SHA512 ba440d1a6680b0137fb251a6e8b69b4df96f761f09a1867a9eb378e30e61b09474b5c355b26c0e24ed7297acc6a4c32da9e317081599af10e97595c9c3ed60ab
- SSDEEP 3072:hLvGqHnesdKOvJAMGVWAGSgEGHrwC0jsMqBqSGK+tqenvL:FHnes1+MGVBBhnjD
- TLSH T14AD38D5FA3E530F9E177963884A10A45E776B43207609FEF07E4025A2F276D18D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
wsprintfA
mscoree
CLRCreateInstance
oleaut32
SafeArrayCreate
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
kernel32
TerminateProcess
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetTempPathA
CloseHandle
CreateProcessA
GetTickCount
VirtualAlloc
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=39, id=261, version=35721,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=7, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,
New folder (3)/dsadsa67 - Copy (7).exe
- IMPHASH 7524ad565ac5f58f97b4d8aec4bd51c6
- SHA256 3a5da3572f2862af3e282bdaf1b2a16a031104db2488267fe8472710e2c2d9e9
- MD5 00b986d65686456999e2a2713cd51631
- SHA1 2aa6b3f701f62046901b364772f8fff04fc30220
- SHA512 ba440d1a6680b0137fb251a6e8b69b4df96f761f09a1867a9eb378e30e61b09474b5c355b26c0e24ed7297acc6a4c32da9e317081599af10e97595c9c3ed60ab
- SSDEEP 3072:hLvGqHnesdKOvJAMGVWAGSgEGHrwC0jsMqBqSGK+tqenvL:FHnes1+MGVBBhnjD
- TLSH T14AD38D5FA3E530F9E177963884A10A45E776B43207609FEF07E4025A2F276D18D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
wsprintfA
mscoree
CLRCreateInstance
oleaut32
SafeArrayCreate
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
kernel32
TerminateProcess
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetTempPathA
CloseHandle
CreateProcessA
GetTickCount
VirtualAlloc
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=39, id=261, version=35721,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=7, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,
New folder (3)/dsadsa67 - Copy.exe
- IMPHASH 7524ad565ac5f58f97b4d8aec4bd51c6
- SHA256 3a5da3572f2862af3e282bdaf1b2a16a031104db2488267fe8472710e2c2d9e9
- MD5 00b986d65686456999e2a2713cd51631
- SHA1 2aa6b3f701f62046901b364772f8fff04fc30220
- SHA512 ba440d1a6680b0137fb251a6e8b69b4df96f761f09a1867a9eb378e30e61b09474b5c355b26c0e24ed7297acc6a4c32da9e317081599af10e97595c9c3ed60ab
- SSDEEP 3072:hLvGqHnesdKOvJAMGVWAGSgEGHrwC0jsMqBqSGK+tqenvL:FHnes1+MGVBBhnjD
- TLSH T14AD38D5FA3E530F9E177963884A10A45E776B43207609FEF07E4025A2F276D18D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
wsprintfA
mscoree
CLRCreateInstance
oleaut32
SafeArrayCreate
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
kernel32
TerminateProcess
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetTempPathA
CloseHandle
CreateProcessA
GetTickCount
VirtualAlloc
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=39, id=261, version=35721,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=7, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,
New folder (3)/dsadsa67.exe
- IMPHASH 7524ad565ac5f58f97b4d8aec4bd51c6
- SHA256 3a5da3572f2862af3e282bdaf1b2a16a031104db2488267fe8472710e2c2d9e9
- MD5 00b986d65686456999e2a2713cd51631
- SHA1 2aa6b3f701f62046901b364772f8fff04fc30220
- SHA512 ba440d1a6680b0137fb251a6e8b69b4df96f761f09a1867a9eb378e30e61b09474b5c355b26c0e24ed7297acc6a4c32da9e317081599af10e97595c9c3ed60ab
- SSDEEP 3072:hLvGqHnesdKOvJAMGVWAGSgEGHrwC0jsMqBqSGK+tqenvL:FHnes1+MGVBBhnjD
- TLSH T14AD38D5FA3E530F9E177963884A10A45E776B43207609FEF07E4025A2F276D18D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
wsprintfA
mscoree
CLRCreateInstance
oleaut32
SafeArrayCreate
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
kernel32
TerminateProcess
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetTempPathA
CloseHandle
CreateProcessA
GetTickCount
VirtualAlloc
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=39, id=261, version=35721,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=7, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=261, version=36260,
count=1, id=258, version=36260,