11f44531fb088d31307d87b01e8eabff.zip.zip
- SHA256 38b01a12b8dcd39ebdcf9e97772e848237330eb227e1ccee80125564b27377e5
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
11f44531fb088d31307d87b01e8eabff/research-1646684671.xls
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
300 seconds
General
- Target 11f44531fb088d31307d87b01e8eabff.zip.zip
- Size 106KB
- Sample261026-vv9wvsvs8j
- SHA256 38b01a12b8dcd39ebdcf9e97772e848237330eb227e1ccee80125564b27377e5
- MD5 0cbede8a169ecbbabd533aa9202d9015
- SHA1 6c75c16101b222cdfad0044b30b4c490d3d37097
- SHA512 fc36ef1ee7a689e8ce03da39296958ac18196a25af9366ed5b2c528a9788a4413f5437f56004ca0489ab5ce36bb1b8750e92fed9df9ab36c4043133f5a625f6b
- SSDEEP 3072:YNtkdbQ4WhaHRyfBZAzdm+KOH8ogqIi7WbD5PUn6:utmQ4xyfBZAhZKmz7YD5sn6
- TLSH T110B3121E66441948C048D7EFB318AF41533FCBE55BB148AF3790768F29E62F01BA6712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/11f44531fb088d31307d87b01e8eabff/iroto.dll unpack002/11f44531fb088d31307d87b01e8eabff/iroto1.dll
File Explorer
-
11f44531fb088d31307d87b01e8eabff.zip.zip.zip 106KB
-
11f44531fb088d31307d87b01e8eabff.zip.zip 106KB
-
11f44531fb088d31307d87b01e8eabff/iroto.dll.dll 434KB
-
11f44531fb088d31307d87b01e8eabff/iroto1.dll.dll 434KB
-
11f44531fb088d31307d87b01e8eabff/research-1646684671.xls.xls 648KB
11f44531fb088d31307d87b01e8eabff.zip
- SHA256 6cec2bf8e5bde0a9d885ca6276d5a3d77affe4225824836a762984e7ecdc8a40
- MD5 9458859abfd384f38362af01fb306f14
- SHA1 2f507cca69fa3ef6cd091d27b21e99cfe1b73506
- SHA512 6e839f4c92d2afe50d1feb29be0c72a8b511523cbfa49d99d2379feabdc0e2376c1bf2e3b03782592e5d9a69045913b18795d643e802171040c95c53ccca094c
- SSDEEP 3072:RUehtXqP0AxDUIhAtLlLnmQofdRrHw0DMUHHu:R1tXqP3FsLlLolzHHu
- TLSH T152B3126865596517C85D73A6B219F89EB1D580B720C0CF12C7E8EAA6B0DCDB03354EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected
11f44531fb088d31307d87b01e8eabff/iroto.dll
- SHA256 055b9e9af987aec9ba7adb0eef947f39b516a213d663cc52a71c7f0af146a946
- MD5 e03bde4862d4d93ac2ceed85abf50b18
- SHA1 7d7c288a8cf7d4e5f64d616da699712b82760303
- SHA512 12e8ef09745a562567dc3d18e3be72dac09120e7756d47d23a605a82499b1ed8ff471578f0f85a35685de13c93f1ad0834a89dce5d136527f731b5e170a520f1
- SSDEEP 12:e9GSG2CTi/FfILQAu//6lgR0FWdzQ2VCARHUwOLe7EEe:e9GSnCTi9ALsQiQ296LG
- TLSH T1A59424DBDF8ADE74E84D06B00667DB1836A821BC0AF549194AAD003EB91DE1479F6F01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14407
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.code
Size
344KB
Virtual Size
344KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=8, id=19, version=8078,
count=1, id=18, version=8444,
11f44531fb088d31307d87b01e8eabff/iroto1.dll
- SHA256 e05c717b43f7e204f315eb8c298f9715791385516335acd8f20ec9e26c3e9b0b
- MD5 8e6fbefcbac2a1967941fa692c82c3ca
- SHA1 242a7803adb19f638ef62077f1b76756f3a13a0d
- SHA512 bc6dc64fa5bc19f234e3df27f718a50f82f6f086da2cd761d81edda4cf9355b40115279ebc368a0f55cf651405e34988336f9f5c3577ce7a7433971194a7b179
- SSDEEP 12:e9GSG2CTi/FfILQAu//6lgR0FWdzQ2VCARHUwOLe7EEe:e9GSnCTi9ALsQiQ296LG
- TLSH T1839424DBDF8ADE74E84D06B00667DB1836A821BC0AF549194AAD003EB91DE1479F6F01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14407
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.code
Size
344KB
Virtual Size
344KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=8, id=19, version=8078,
count=1, id=18, version=8444,
11f44531fb088d31307d87b01e8eabff/research-1646684671.xls
- SHA256 1df68d55968bb9d2db4d0d18155188a03a442850ff543c8595166ac6987df820
- MD5 b775cd8be83696ca37b2fe00bcb40574
- SHA1 60c8a9fdf2b24f8fb4913d4745a8557df5ff8e07
- SHA512 5ad4da8582bec3cc545e322cad2e356f59c4bfa5fe4ca90c0e781dd0e63a7aefbcc27b4045583232e4fdccffbc2bceb832b8d8e9ec3c070cf4b6559ca3c99a72
- SSDEEP 6144:Hknl9oBdySAx76F6XeyTVtW/9Ny9ABnl5/PBgxOHjuM9Mn:jl5/WxIji
- TLSH T12CE47319E21BA159D321537BFE318385812FBDA2492DBA4B774D7A3EC6F41D0E74A308
- MD5 SHA1 SHA512 SSDEEP TLSH