APPLEWAR.zip
- SHA256 2588da69e64b3e7ca4cfe2a735ad8cd5b67bbf7df8bad7fc4cd3c654daccdf2d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
APPLEWAR.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
APPLEWAR.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
launcher.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
15 signatures
300 seconds
Behavioral task
behavioral4
Sample
launcher.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
General
- Target APPLEWAR.zip
- Size 39.5MB
- Sample261029-2dxzastthy
- SHA256 2588da69e64b3e7ca4cfe2a735ad8cd5b67bbf7df8bad7fc4cd3c654daccdf2d
- MD5 01c6699636b3893577294657d7b1133a
- SHA1 fb9332c1ae68577521606bb2d199c17ed314b239
- SHA512 8fbae236d00a9b3d436b362fd1737674c79009a8bda1b392b072e44cf966847ad8430a77a5695aa486ff89b69a9c0d9731a13237d842e26161b94fe7043588dd
- SSDEEP 786432:Dy/uMgbNIcE3GSQUCwci8lTALsHI5Ir6qK1ZbCdFDvIzSEERiF6RqU6mrTiQNJLL:GWLbNIpCE8QV5IrW1Z+/DgFERpqU+QvL
- TLSH T124973308FCA437C93E52A7C028176DADE43D6E35B177A918B178428FD54B1CA78F1A78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/launcher.exe
File Explorer
-
APPLEWAR.zip.zip 39.5MB
-
launcher.exe.exe 44.8MB
launcher.exe
- IMPHASH 566dab8f2bdd37729617bdf254ecb213
- SHA256 426371935589eb0318b52629e7b42d48b35f01e8a376f04d1a0385b108ec57eb
- MD5 2b920914424e4d9be9daf7310d6209bb
- SHA1 313f71972b3cfc1c1afce719114f439479f80f3c
- SHA512 4195e30118c0756e6498e9af6d3cdce3973546a1cb74a8ad414ebd6e027a8641c6b3be95fcb94ecdeacef81d7a783d18cc76f4064874ca88289e72ea5cca8b36
- SSDEEP 786432:dR+2mYnG0ia6CI82VRm5qjCnqbGgurJ1izFDX4TiEPJ0mqw4Ww/dvES0YYfwaDBj:d4256CqE1nqbcrJ45DIRJ0m54d/dcS0x
- TLSH T1D9A723CBD5E693E4C8C30784158712CB65C0A99EC5AAD63D3BCF6C037410EBB55CAAB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
69671364
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteProcessMemory
shell32
ShellExecuteW
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
api-ms-win-crt-stdio-l1-1-0
fclose
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-runtime-l1-1-0
system
api-ms-win-crt-heap-l1-1-0
realloc
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Name
.text
Size
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.shika0
Size
Virtual Size
36.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.shika1
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.shika2
Size
44.7MB
Virtual Size
44.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ