code_scraper-x86_64-pc-windows-msvc.zip
- SHA256 bff0a9f776cd8135b9f9cf3e517c0ac54414c506afade6cfad3ac93a8fd534bf
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
code_scraper.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
code_scraper.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target code_scraper-x86_64-pc-windows-msvc.zip
- Size 2.2MB
- Sample261027-bdh72aaw2l
- SHA256 bff0a9f776cd8135b9f9cf3e517c0ac54414c506afade6cfad3ac93a8fd534bf
- MD5 abe859be7c1fa58c26a43d84b3316aea
- SHA1 edd53b517ef8dc1289d076b426532d2ac3467724
- SHA512 8f5e2f6e8319e4887b55cc5da2a79840ae6cfef61987676bd05487b649fcfa461691082fbf460a224645955ec897fa9fbfc68a38ef23a51092e4ae5a6ff3fcf6
- SSDEEP 49152:KEYX44t0NsR5yGNqxgRJcHM9UbS89hc6JSKBsjWUubS6dVehhrQ:b20kQXJ7TSiaQ
- TLSH T14EA53A25BA9A98EDC15AC4B083464AB3692174CB0F35B9FF40D486753E7AAF01F3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/code_scraper.exe
File Explorer
-
code_scraper-x86_64-pc-windows-msvc.zip.zip 2.2MB
-
LICENSE1KB
-
README.md2KB
-
code_scraper.exe.exe 2.1MB
LICENSE
- SHA256 03283f173f7d99dd9f03fe286d80d02aa7fa66277987b4af276efb7d2724ff1d
- MD5 3b82384dd19217da8d69708432593663
- SHA1 c9e9af00b4d6769c5da3d846e0abf839223fbd8c
- SHA512 15d743003ba3df6b959910d5e75671ee1dac6c75738796032d0c40a2a58643ac1e6e4b31682ac36f0ae4c304f2ccce7c7535af3c3a9f824e06c633ca60fb9c74
- TLSH T1DD11861F725503B3189657A055A9ECD6F12BB18A7F6B1580346DF2051326058C5FFC64
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 b9a9d751b5be3be5c166b51f43fca550484663c639763f1ef1db00371545b689
- MD5 07eb02020bc6444cd8df4844138f6d12
- SHA1 e111364465df69bbaaff7c3156bf5d9cd0f1e9fc
- SHA512 0b250dd457faec7adb94e1c9478239bc2ee21f682619f89dc5ec78d61058a8e4a882a7d10474eca879c37f4130be9235b4c4a46f66d6ee53869fa247d25585d4
- TLSH T1DB51512FAC8A13B605530983B70E99D1EF28D0CC935995BD786D039C7192A9483FB56F
- MD5 SHA1 SHA512 TLSH
code_scraper.exe
- IMPHASH 81a41ab9343583d5360b8bae1c08e889
- SHA256 deeca581040a6e8b0d1b08da59e5f5ba54cabf2e5aea69af18eb14af36fc5abe
- MD5 ca8ac80fc72c2d0b23b2e8cfc94e7ed8
- SHA1 9dff43e66296dedb0b9a972c47be9b60a14937c8
- SHA512 96d690798e47954c3696b282d6145e171706cf101340890428fd86835ceb936b1eeaae90e4a9f5497b0213f766668144c8b3f0969d9290010abdd03cebb2e50b
- SSDEEP 49152:mEYX44t0NsR5yGNqxgRJcHM9UbS89hc6JSKBsjWUubS6dVehhr:v20kQXJ7TSia
- TLSH T119A53A25BA9A98EDC15AC4B083464AB3692174CB0F35B9FF40D486753E7AAF01F3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1655596
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\code_scraper\code_scraper\target\x86_64-pc-windows-msvc\dist\deps\code_scraper.pdb
advapi32
SystemFunction036
kernel32
HeapFree
HeapReAlloc
GetStdHandle
GetConsoleMode
SetConsoleMode
GetLastError
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
CloseHandle
FindClose
TryAcquireSRWLockExclusive
AddVectoredExceptionHandler
SetThreadStackGuarantee
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
GetCommandLineW
GetModuleFileNameW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
AcquireSRWLockShared
ReleaseSRWLockShared
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
FindNextFileW
CreateFileW
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
FindFirstFileW
WaitForSingleObject
GetFileType
GetModuleHandleW
FormatMessageW
ExitProcess
GetFullPathNameW
MultiByteToWideChar
WriteConsoleW
GetCurrentThread
GetSystemTimeAsFileTime
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
GetCurrentProcessId
CreateMutexA
ReleaseMutex
SetFilePointerEx
GetConsoleOutputCP
FlushFileBuffers
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
WriteFile
TerminateProcess
GetModuleHandleExW
GetCommandLineA
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
bcrypt
BCryptGenRandom
ntdll
NtReadFile
RtlNtStatusToDosError
NtWriteFile
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
420KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=138, id=261, version=30795,
count=10, id=260, version=30795,
count=40, id=261, version=30034,
count=16, id=260, version=30034,
count=9, id=259, version=30034,
count=5, id=257, version=30795,
count=118, id=1, productName=Unmarked objects,
count=213, productName=Unmarked objects (old),
count=1, id=258, version=30154,