61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587.zip
- SHA256 163d1ec5ddf85139db7e7150bf1cc5bb60be7b95f51c835e56b5774cbe091a4a
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587.zip
- Size 23KB
- Sample261027-svf8faez5p
- SHA256 163d1ec5ddf85139db7e7150bf1cc5bb60be7b95f51c835e56b5774cbe091a4a
- MD5 6ac540cdb484a0173bc62d135a045632
- SHA1 cbe28f5a0a283f697bc4890b7d291efc696ee250
- SHA512 d79c80bb7369422def4034d311da8ebc12e62c417f7969d6f92c6d9f828323319113a35c226e310a962d7f9679c03a934e06d82b4041c0c22d18756108862e75
- SSDEEP 384:DghhGg99q4WjvGdThuqEPyE186GuqcRtVI4z1XAtNu+W0bHm6vigF3r9pa3sG4a:oLq4mGNKyE1vGAtW4z1X8Nu+W0zm6NpC
- TLSH T173B2E0D9D2753724435F9081D072111A0582999A67DF3A637AEC38FF0B763C02B73CA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587.exe
File Explorer
-
61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587.zip.zip 23KB
-
61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587.exe.dll 36KB
61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587.exe
- IMPHASH aa28b7451dfd557b821c244f4440a1cd
- SHA256 61a10a01cb3ef6db810baa7d3b98c2f0fd8c0618d5ea48643a15484f4ca73587
- MD5 2b423050483b83adacb82165df4c0c6b
- SHA1 db761f3879fb600fecb9e973da3263a552293a2b
- SHA512 1c5418e25dad3771cb1ea5eb700b982960f8da7145cb3adcb8995e2de9357017d151811d8214cdfa7f2364ae4ee978ea69585e3350c01a9d4be1861a24f584e8
- SSDEEP 768:GSfIq0Luo5MZixvdy1yV0wGaspaJWLAhpzRmlUJtlc3Vqc:BQEo5MgRdygJGaJWYMf
- TLSH T14CF29E4AF2A768FCC000C57882EBB776EAB1FC6045336A2E4354DE343D15A54BB3974A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4896
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateDirectoryW
CreateFile2
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
GetEnvironmentVariableW
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetSystemDirectoryW
GetTempPathW
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
ReadFile
SetFilePointerEx
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WriteFile
msvcrt
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcmp
memcpy
memset
realloc
strlen
strncmp
vfprintf
ole32
CoCreateInstance
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
oleaut32
SysAllocString
SysFreeString
CPlApplet
Name
74w2xhs8
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
ltko-7e5
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
yx88nh2k
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
nxn7os.r
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
5-90z.xq
Size
1024B
Virtual Size
604B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
t3hyb4rc
Size
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
skl.34.h
Size
512B
Virtual Size
71B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
v6srsgsl
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
p0eh2-ek
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
6r._e__y
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.g5nxra2
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ