ctx-wire_0.1.71_windows_amd64.zip
- SHA256 ff54efd322e8478e304afe6d50f7353aecc27531b62ffc7b3f4e8ea8bdc818e3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ctx-wire_0.1.71_windows_amd64/ctx-wire.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ctx-wire_0.1.71_windows_amd64/ctx-wire.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target ctx-wire_0.1.71_windows_amd64.zip
- Size 8.1MB
- Sample261027-bc434shw8v
- SHA256 ff54efd322e8478e304afe6d50f7353aecc27531b62ffc7b3f4e8ea8bdc818e3
- MD5 491d5a101728ef4b263fc2cf7f157599
- SHA1 c33833acf6feaeccfaa40462be2dc35f1a943959
- SHA512 a67db4ae0481b44bb6bbc4159fad8e0a12ee92fa4d4353cf3d29b8fba6a21b15558e1e7e154e1b7bcae59e4d5ee3674e39b28b0822e2ac3925ca64fcb95e0558
- SSDEEP 196608:VLD5MKV0WBDIAghO3l2Md3ghPk8Ti5cLmHSL:h6KFdIAgI3lpmzTgQuy
- TLSH T1478633A9ECC025A21AB9AA41FCF323D34746C306D4416CF056CFC69F6B9556CF9A3C62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ctx-wire_0.1.71_windows_amd64/ctx-wire.exe
File Explorer
-
ctx-wire_0.1.71_windows_amd64.zip.zip 8.1MB
-
ctx-wire_0.1.71_windows_amd64/COMMANDS.md20KB
-
ctx-wire_0.1.71_windows_amd64/CONFIGURATION.md10KB
-
ctx-wire_0.1.71_windows_amd64/DEVELOPMENT.md2KB
-
ctx-wire_0.1.71_windows_amd64/FILTERS.md12KB
-
ctx-wire_0.1.71_windows_amd64/INSTALL.txt284B
-
ctx-wire_0.1.71_windows_amd64/README.md3KB
-
ctx-wire_0.1.71_windows_amd64/TROUBLESHOOTING.md7KB
-
ctx-wire_0.1.71_windows_amd64/ctx-wire.exe.exe 15.7MB
ctx-wire_0.1.71_windows_amd64/COMMANDS.md
- SHA256 1985e673a3f490bd81f01b48bd5866123d553b34659eafb99d9dc4d1adc12ef6
- MD5 9bf6f35fce2ba0f1b1cb114058b5c822
- SHA1 7d7e9bac2097041cd30b25b66fa0cf96151de993
- SHA512 a35d1fd7346e43ded1d0bda9fbc8b8e35c18794bf87188657169d805fb0706e78defb4da3f794f93025c8d36620ecff9c8ac5f3f8cb5b77c4e6ecbafd0b24b73
- SSDEEP 192:NybV4IpU9AMET4WlzUHxMp1cvMIe9+UfW9koaQo0CVU64n9YW5l9ICr3i1btFo86:3AMSlYyfUxe9tW9d+nc9tCCOmFnClxe
- TLSH T16192D81BB3CC7335CE810772760AB5D5D725D6E863123535A4BDC3AC719A2B8826F3A2
- MD5 SHA1 SHA512 SSDEEP TLSH
ctx-wire_0.1.71_windows_amd64/CONFIGURATION.md
- SHA256 096f72e3f36a5886325968c7840ef0873bd56513c4430a8ff645330a911ef02c
- MD5 4a1d098a4c51960733a280e0f82228d1
- SHA1 9d86fabe35d9601669e742334320f0020bb1459b
- SHA512 a92601a39b47fbb50675c65e195655d1039b35bfaafada11f29235c5005f9c331a4f965203c5b4bb4f8457773dd190a9ac76f28529d1122e77b6bb7e60372d5a
- SSDEEP 192:m0R3Shsmpb4iPs2GkXVjSOv4GzvHdhfpQE9mYJ4CkknXa1QE:BR3ZontGMJgGzbfpf9xWvknq1QE
- TLSH T15D22F86B72DCF3B15E820225B70AD2919736D29853223022A9ADC34C37C947C59EFBE5
- MD5 SHA1 SHA512 SSDEEP TLSH
ctx-wire_0.1.71_windows_amd64/DEVELOPMENT.md
- SHA256 0daf95822405d7cca1af64464f71ad7f4b764681c500dbdca7dfbe3a371b47f6
- MD5 fd9702189e0d244749d90ff4cc553b47
- SHA1 fa9b6fae24703f1ce343260524ae3cb4023cb2b4
- SHA512 96add838a40ea25ca834d2d5964d6adbc0212057d9b09ecdd56c2ea330a005d3b13e7fdc21d8d1d81b02e2346b288783cd9e62791eb587843db3f8b52b2bf40d
- TLSH T1F4512E3E356E53F784C282639074B692C711D9AED398ADF4D91DC638175B6F9003F281
- MD5 SHA1 SHA512 TLSH
ctx-wire_0.1.71_windows_amd64/FILTERS.md
- SHA256 8d3b52ba1fa9e730027c437b93424d420ee7b562dddbac7d6b33cd5622db6679
- MD5 20ddccc645aa67b1d07a4d26d391b4b6
- SHA1 5f036ca6ceb3ad8675bb1a608e49353755d13b37
- SHA512 255e2069668f9dcb561578a5ac4b13fb3dcc95f2749fd311ba0411574d47fe75ebcc7de78d665f8d0c67bd12e67fa24ef900a3f28a17368438c0ae0e041157ee
- SSDEEP 384:5tM21KgKXJ5A2FLc4UC7BXHgy0qULTJe8YDB9Sv9D:5tRKXJ5A2FYS7xh0PJmTSvh
- TLSH T1BB52F7ABE6E5633646D105A1FF8D66C0D722D07D63653872F4CEC16C330A27D82B9AE0
- MD5 SHA1 SHA512 SSDEEP TLSH
ctx-wire_0.1.71_windows_amd64/INSTALL.txt
- SHA256 b838f41e11b5568977aaf763d086286a3571e0fb391d5386bf813b776d1043cc
- MD5 6a3cede0900a0a74d1a0faf366007de0
- SHA1 81cd71a68b2e723322a9551c993e72d4d47b9a79
- SHA512 fbbbd75ca59ed24773e7b526545fd197c1f82dfc06bf500c801513f416024d84fda6de2b9f08317e2f80d6a017aa51ddae9613d0b55bc426c4e94e222db09e5f
- TLSH T1B5D02E0E38CFF277E92043B826AB7460C393D2EA00083935A7C2C361AFC21782721183
- MD5 SHA1 SHA512 TLSH
ctx-wire_0.1.71_windows_amd64/README.md
- SHA256 5cb8596920f9ea4f56ba8caf3f20962bafc046fdd8c45899ab88e56cd1d67d90
- MD5 e03e17fca54f3ce21e43eb56f4232f79
- SHA1 bcb55d32cc4f0fc28f46fe4763087d6b8315dabf
- SHA512 58cd998b7f51a6ecd1b5cf22d6e9bae1f1bc7869ab0ccf01aeccb4e90a0bce5b79837f6c2557aacdd723fefcc234ea4777f904c730e03cc44b0a544e3a513301
- TLSH T10861C80F365C72765F120382B15EB2D8DB2EE6D522997069F68DC64813C837F42BA2E1
- MD5 SHA1 SHA512 TLSH
ctx-wire_0.1.71_windows_amd64/TROUBLESHOOTING.md
- SHA256 06c512c4dcec23b6d4d4bafe6c524719bbc3841b020417fed63ee8c35a4eb274
- MD5 ada59bd86a13f4235512df9aca02e836
- SHA1 4cdc8b316d69e1668574139e6835210e0fe816fb
- SHA512 1bdf060a01207080fdd6e82d2f7c9745676e946eb7e5851f0f9018e0ac2aa22995c226ec9f231ec7d8264f0eb70913bf7afec4326b67e42fce02dc8620a8a195
- SSDEEP 192:vMJSu0BU+2iRuIq0iht1jzUznVEo/BHQbV62AkVgslm:vMJSZi6UIq02/+nV2VFHKB
- TLSH T1FCF1B75A73ECB371C7500364B39AA1E19B21D6F802253974D5DDC3AC329E27886AE2F1
- MD5 SHA1 SHA512 SSDEEP TLSH
ctx-wire_0.1.71_windows_amd64/ctx-wire.exe
- IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
- SHA256 15bd6efb2ea7f40c04308dca5456be26bf271b613cd243f28166e61392ecea71
- MD5 93c32096787292f6fa641f3d01a37bbe
- SHA1 45dcf7474f08785558fe0f5918271b6c248a164c
- SHA512 824c91f8a40a368960e931326ea3151e2922708dfbcdc9782a46a0dafc35986208f5774514895098ff6a1cf14a7ce80f537428f097c36c837f3d0caa1a86b341
- SSDEEP 98304:MOyIQKrMdOA1BJF1vITwtx4wtjqS4MEoU4hzP1VuqUnkuh93rk2DM0QeZnJftOsk:MeLAYE+tSaqhLokYrFYIfIbb
- TLSH T10FF68D03EC6559E9C1AED270C9B292537B707C494B3123D72B50F6386EB6BD0AEB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
560768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcAddress
LoadLibraryExW
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
4.8MB
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.5MB
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
769KB
Virtual Size
33.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
192B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
833KB
Virtual Size
833KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
174KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
845KB
Virtual Size
845KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/95
Size
326KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/112
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
907KB
Virtual Size
906KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ