open-cpu-diag-windows-x86_64.zip
- SHA256 80eb47077c638077311525cea751c322bebf3d50821ea3704fae84396dd0a1fd
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
open-cpu-bench.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
open-cpu-bench.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
open-cpu-inventory.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
open-cpu-inventory.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target open-cpu-diag-windows-x86_64.zip
- Size 189KB
- Sample261029-2q8assfv4x
- SHA256 80eb47077c638077311525cea751c322bebf3d50821ea3704fae84396dd0a1fd
- MD5 6e8d45c09b12696373778157bf244095
- SHA1 9ecbdd4909d65f9f73735e42282e1d705dc6e0a8
- SHA512 0980b718a558770e22e4d3fc2006c749813f402af57b132e36be2d7ae015b22bf7bb72d7c62441958bfef6cdc90d7e86d9dc645bb368c6a196b700041f7395fb
- SSDEEP 3072:phFxuhKGAXzXh6z4gLcmqQsUO+Yt72vBVjpZvd+y9cpTMNGRLe8lUlph2X77cdWl:pRrGAXzx6zLLcXY/YtIVt1GiNGkeshGN
- TLSH T18514239F5376CDBD4463DB73CEB90D0E7A2892245A0A909E6394BD78D46FD00EA24F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/open-cpu-bench.exe unpack001/open-cpu-inventory.exe
File Explorer
-
open-cpu-diag-windows-x86_64.zip.zip 189KB
-
open-cpu-bench.exe.exe 197KB
-
open-cpu-inventory.exe.exe 180KB
open-cpu-bench.exe
- IMPHASH 4bf97aaadb69b56f81f98d26fc5f8b2b
- SHA256 3778f67de551246013c0bf653d1a0957a80f85345e3eebd702702802c75b8fb8
- MD5 e390a7aa5b8d0739473871218c7be3cf
- SHA1 7405895d5ef92d3ac9e77c4b815e0c377af70579
- SHA512 21d969ecbb916ca982f36a9a604f5c2145b88a46790a16d9dea2558c3a694fc5513e2303bf9ef61da6c3b355a7d68a0d12619253dd78bc1aa3b20d4470a690a4
- SSDEEP 3072:xKPenrp/bK/yhXZQf/ziYjqRxmJh5WMNwPZbd/N5UMJVRfBpQ:8PxqhX2riYC0J+GcJNeMJnfBp
- TLSH T16B147D06755154EDE857C034836A8A73A52270891B326AFF07E50638BF7BEE16F3CB58
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
142528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
bench.pdb
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WaitOnAddress
WakeByAddressSingle
kernel32
IsThreadAFiber
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetLastError
CloseHandle
WaitForSingleObject
SetLastError
GetCurrentThreadId
GetStdHandle
GetCurrentProcess
GetProcessHeap
HeapFree
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetCurrentDirectoryW
lstrlenW
GetProcAddress
WideCharToMultiByte
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
ReleaseMutex
GetEnvironmentVariableW
HeapAlloc
MultiByteToWideChar
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
FlsFree
FlsAlloc
GetModuleHandleExW
GetModuleHandleW
FlsSetValue
FormatMessageW
GetModuleHandleA
QueryPerformanceFrequency
ntdll
NtWriteFile
RtlNtStatusToDosError
vcruntime140
memcpy
__CxxFrameHandler3
__current_exception_context
memcmp
__C_specific_handler
memset
memmove
__current_exception
_CxxThrowException
api-ms-win-crt-string-l1-1-0
wcslen
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_set_app_type
_crt_atexit
_configure_narrow_argv
terminate
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_cexit
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
_c_exit
_register_onexit_function
_initialize_onexit_table
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
145KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=3, id=259, version=35721,
count=9, id=260, version=35721,
count=23, id=261, version=35721,
count=9, id=257, version=33145,
count=185, id=1, productName=Unmarked objects,
count=25, productName=Unmarked objects (old),
count=1, id=258, version=36260,
open-cpu-inventory.exe
- IMPHASH 8bc93c45cd6570f90ebb24c5ad83eb10
- SHA256 ceeacbc6a1c5398f9d9fffe55b92f965f46abbbaa79d5dbe213c67bcab8a93c2
- MD5 10727c31f836d233dcdfc968c925d5d8
- SHA1 1b1ae66147395f8bbfbd10b902348307a9808bc2
- SHA512 a28ab911d75b9e2ca03c22cf7b355bba64d67c062910e12bf8f51fe61d2f44ae083bb4e15d61260e51886db90f78e250f09decce581c42efb4037ad164c216f7
- SSDEEP 3072:NM8neYBfnWmqAYG+1lMG+Vw1zYbR/9RWS:7neYBP4AY7lM1CGl9RWS
- TLSH T1EB045B12768251EED44BC034835685B3A67270CA1F326EFF139582386F6DAF66F3C664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
126320
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
inventory.pdb
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WaitOnAddress
WakeByAddressSingle
kernel32
IsThreadAFiber
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetLastError
CloseHandle
WaitForSingleObject
SetLastError
GetFullPathNameW
GetCurrentThreadId
SetFileInformationByHandle
CreateFileW
GetStdHandle
GetCurrentProcess
GetProcessHeap
HeapFree
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFileTime
GetFileInformationByHandle
GetFileInformationByHandleEx
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetCurrentDirectoryW
GetCommandLineW
lstrlenW
GetProcAddress
WideCharToMultiByte
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
ReleaseMutex
GetEnvironmentVariableW
HeapAlloc
GetModuleFileNameW
MultiByteToWideChar
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
FlsFree
FlsAlloc
GetModuleHandleExW
GetModuleHandleW
FlsSetValue
FormatMessageW
GetModuleHandleA
ntdll
NtWriteFile
NtReadFile
RtlNtStatusToDosError
vcruntime140
memcpy
__CxxFrameHandler3
__current_exception_context
memcmp
__C_specific_handler
memset
memmove
__current_exception
_CxxThrowException
api-ms-win-crt-string-l1-1-0
wcslen
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_set_app_type
_crt_atexit
_configure_narrow_argv
terminate
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_cexit
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
_c_exit
_register_onexit_function
_initialize_onexit_table
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
129KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=3, id=259, version=35721,
count=9, id=260, version=35721,
count=23, id=261, version=35721,
count=9, id=257, version=33145,
count=185, id=1, productName=Unmarked objects,
count=25, productName=Unmarked objects (old),
count=1, id=258, version=36260,