Download.zip
- SHA256 64efca706fb62a01c39f54ecd5f3e9dc11dfca85d1a6f269ad1469b7985fa73e
Static task
static1
1 signatures
General
- Target Download.zip
- Size 4.0MB
- Sample261027-dwjbvs1tez
- SHA256 64efca706fb62a01c39f54ecd5f3e9dc11dfca85d1a6f269ad1469b7985fa73e
- MD5 abb2328b01dea3db3c9f47f518ab9cd7
- SHA1 403afcaf847ecdbfb372a611714997b7550288eb
- SHA512 346d6cdcb0c10e0f7fd6c761278b41575fb71134c3970cddf1ef3c9e0094cb233e8d35440fc6d05dee26bc3a9e14080307a848157b7a11bbb9548080d8cc8553
- SSDEEP 98304:iBmPJBl/2uZomck5EFI96dzyl4qjdixZShHFJVF+W6/V29FL9rSs:iIPJBjSe9uylJk6FJX+WW2v9
- TLSH T1701633C00408E49BC66E9CD411B58A1BE3ACEFB9E5A5003A57FF9DF18E182F79047D5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VolcanoInstaller.exe
File Explorer
-
Download.zip.zip 4.0MB
-
VolcanoInstaller.exe.exe 4.1MB
VolcanoInstaller.exe
- SHA256 8ffe53aa8140887b7d62e9fe68357b3c1f9f584634082f641a2c40b2fd2242f1
- MD5 8fc4d0edce90a149d94d088922264b41
- SHA1 c97afd3c28b8853031a557ce19841b71e6f0010a
- SHA512 98701285a644c164824c84dc3d7b6ad1e82126cb82dd2c908fab8526840de6746d77c025ea2d3e1e1d18d3fe02e68868ae76c1c8fc9ad65948f7251804d986d8
- SSDEEP 98304:9BmbvBlUBwVHST0iskxPHB+pVU06R3tM7gFW5YpuG:9IbvBSCVyT0ZyAKR/c5SH
- TLSH T1A316337135C5292CC0781CBADA63C8071A699E790C95040B7F763FBEBB393CA5753A98
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
7733336
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
Size
544KB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
110KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
4KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
32KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
586KB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
227KB
Virtual Size
227KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
vvv
Size
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=198, id=261, version=35222,
count=21, id=260, version=35222,
count=16, id=259, version=35222,
count=3, id=253, version=35721,
count=18, id=260, version=35721,
count=12, id=259, version=35721,
count=96, id=261, version=35721,
count=23, id=257, version=35222,
count=324, id=1, productName=Unmarked objects,
count=231, id=260, version=36260,
count=22, id=261, version=36260,
count=2, id=265, version=36260,
count=1, id=255, version=36260,
count=1, id=151,
count=1, id=258, version=36260,