make-3.81-dep.zip
- SHA256 15fca07f695c3a82b22d5470641c60d893d727afce47add9af4f0f7c47bab747
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bin/libiconv2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
bin/libiconv2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
bin/libintl3.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
bin/libintl3.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target make-3.81-dep.zip
- Size 691KB
- Sample261027-ec3f3a1vby
- SHA256 15fca07f695c3a82b22d5470641c60d893d727afce47add9af4f0f7c47bab747
- MD5 2edb5b27ab0818b727fb43494dc40a5f
- SHA1 ee90e45c1bacc24a0c3852a95fc6dcfbcabe802b
- SHA512 bd4467c0d708c1deec3604754cea9428e4aa5f6e7d9ec24f62bc4d68308f12dec4661b900c1787b50327bc7eb9a482a0ae6ee863c21937c1faea414e5ccb5c04
- SSDEEP 12288:vUbbWK7KlgBMzmOlrTdo85gOHEnvp9zOYAI4bxS8oRFR/27KiJXjirE8SYkC7ar6:vUOK7KmBM9z5XHEniYBUsbRFFTbSYzY6
- TLSH T1E2E423C5E97A1B18717BC853CDA81BC0C6EF16966F93042F3CA6874260FB5E73993606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/bin/libiconv2.dll unpack001/bin/libintl3.dll
File Explorer
-
make-3.81-dep.zip.zip 691KB
-
bin/libiconv2.dll.dll .ps1 877KB
-
bin/libintl3.dll.dll 101KB
-
manifest/make-3.81-dep.mft93B
-
manifest/make-3.81-dep.ver24B
bin/libiconv2.dll
- IMPHASH e1835b7f4804244b03fffd302baaf1d8
- SHA256 3ec2d1a924ef6f19f2db45e48b9cf4b74a904af5720100e3da02182eee3bcf02
- MD5 331f570aa7c20bc93deb7b237b21cc9c
- SHA1 2d9ff158ffa0161aac3aa2197c361bc56369a308
- SHA512 89960144cef6ff89c11cc3fd14c62c2633f418919c72d3c9082143bf602d51fd9c6c8870f6f194cb2ccaaf4e19f5e13825bf036d5cfd3721cbd7514e890a87b3
- SSDEEP 24576:Zf0TfklyKuJGavkg3Ny4WbbbVQMBAUZLYVgem:daayKuJGaXFQQMBAUZLYVZ
- TLSH T11115CE82F3C6CF17F527C670893A9B7BD522EC225B0684277A65FB8A9D377E450C8112
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
AddAtomA
FindAtomA
GetACP
GetAtomNameA
GetModuleFileNameA
msvcrt
_strdup
__dllonexit
_errno
abort
fflush
free
malloc
memcpy
qsort
sprintf
strchr
strcmp
strcpy
strlen
strncmp
DllGetVersion
_libiconv_version
libiconv
libiconv_close
libiconv_open
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
locale_charset
Name
.text
Size
867KB
Virtual Size
866KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
285B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
656B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
bin/libintl3.dll
- IMPHASH 11d4cea984db7aee4eb18d2031242a3e
- SHA256 f48ce1866602b114e653c876334b771107559acf1c685373d2305034613958f0
- MD5 d202baa425176287017ffe1fb5d1b77c
- SHA1 192e597d8ff0192f6c4e4643361f84277ed51121
- SHA512 706d74c56ce8d08539c729bdb6c8d57c9a4b0a1c795b8574a1bb2c452358e1bfd5d4fca5a00ab7568dea4ae02c553ce6ab199b3c6418a44cb8915f7e26bd2988
- SSDEEP 1536:bMuK+nitJ6B/16WVlvdftjm0YMBBCauBKNJ0n/bDsS22E:bMuMJ6B/16Srf9ljJ0/boS22E
- TLSH T19BA36E46B2C74CF1D8270C7151AAE73E93305E31C820DEA5DBA0FBAFE9339D15A19256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
libiconv2
libiconv
libiconv_close
libiconv_open
libiconv_set_relocation_prefix
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
AddAtomA
AreFileApisANSI
CloseHandle
CreateDirectoryA
CreateFileA
DeviceIoControl
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetACP
GetAtomNameA
GetCurrentDirectoryA
GetDiskFreeSpaceA
GetDriveTypeA
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GetTimeZoneInformation
GetVersion
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapFree
LoadLibraryA
MultiByteToWideChar
PeekNamedPipe
SearchPathA
SetErrorMode
UnlockFile
lstrcmpiA
lstrcpyA
msvcrt
_chmod
_close
_getpid
_open
_read
_strdup
_stricmp
__dllonexit
__mb_cur_max
_assert
_close
_errno
_fdopen
_filelengthi64
_flsbuf
_get_osfhandle
_getcwd
_iob
_isctype
_open
_pctype
_snprintf
_snwprintf
_stricmp
_vsnprintf
_vsnwprintf
abort
calloc
ctime
fclose
fflush
fgets
fopen
fprintf
fputwc
free
fwrite
getenv
isalpha
malloc
memcpy
printf
realloc
setlocale
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtoul
tolower
toupper
vfprintf
vfwprintf
vsprintf
wcschr
ole32
CoCreateInstance
CoUninitialize
OleInitialize
DllGetVersion
_nl_expand_alias
_nl_explode_name
_nl_find_domain
_nl_find_language
_nl_find_msg
_nl_free_domain_conv
_nl_init_domain_conv
_nl_language_preferences_default
_nl_load_domain
_nl_locale_name
_nl_locale_name_default
_nl_locale_name_posix
_nl_log_untranslated
_nl_make_l10nflist
_nl_msg_cat_cntr
_nl_normalize_codeset
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_asprintf
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcigettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_fwprintf
libintl_gettext
libintl_gettext_extract_plural
libintl_gettext_free_exp
libintl_gettext_germanic_plural
libintl_gettextparse
libintl_ngettext
libintl_nl_current_default_domain
libintl_nl_default_default_domain
libintl_nl_default_dirname
libintl_nl_domain_bindings
libintl_printf
libintl_relocate
libintl_set_relocation_prefix
libintl_snprintf
libintl_sprintf
libintl_swprintf
libintl_textdomain
libintl_vasnprintf
libintl_vasnwprintf
libintl_vasprintf
libintl_vfprintf
libintl_vfwprintf
libintl_vprintf
libintl_vsnprintf
libintl_vsprintf
libintl_vswprintf
libintl_vwprintf
libintl_wprintf
locale_charset
ngettext
st_flags
textdomain
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
192B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
manifest/make-3.81-dep.mft
- SHA256 ef6a6b99cff8cf82105d5ab9af13ff6d33609ef8c6c6bd04e74a5cdee9261091
- MD5 e23c2ffa6a8ab70816d1348a03b12bf1
- SHA1 5d27960e60400aed1ae43274929bdd6d1bb7fc6b
- SHA512 5a836a421ad9e8da667ed8b3d9ed2b5a1bbb85a2847faddc8dd1f28eab742eadf7b4e488c8f1fe202927792d48a4fce141d7053ab799e4016aa1508f1623ae34
- TLSH T15EB0120EEC1F03D07C7518320032598532ACCC183F0625001B203CF426B1033412C274
- MD5 SHA1 SHA512 TLSH
manifest/make-3.81-dep.ver
- SHA256 8a618dc31bf8508d039444a5bd32b65aae72b10836729ff745f6370f35ada520
- MD5 e02f630a24f395716e7fa704285843ef
- SHA1 73b926562270d8c09fe1a0dbdc55917808fe3782
- SHA512 33058bab8064edfc1c4bdfc09176c236b8332f57d3af62874f7ffc11c001b0bf5f309671e31b82a3b7f7d395a296a00b5d065a042e416d4bfa36e7db036ee19a
- MD5 SHA1 SHA512