VulnDock_windows_amd64.zip
- SHA256 eb9e9b98a42a550b231a7c33b08b9f871fe5833b30051f0611173305fdaabb15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VulnDock.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
VulnDock.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
General
- Target VulnDock_windows_amd64.zip
- Size 5.1MB
- Sample261104-tagtxabs8x
- SHA256 eb9e9b98a42a550b231a7c33b08b9f871fe5833b30051f0611173305fdaabb15
- MD5 ab838e5840abd1231de08c983ff8c103
- SHA1 f3775a463bdd7dd2c2cfe6bf2c0597ba41f6ef35
- SHA512 542081b2f9f1ab40928156e0c01a747f524fdfc5e7ba5af447fda388738fe527a295256cf118da0c8422c397813696b8f9a14ca7bb5ea1c85a36c2ead301253c
- SSDEEP 98304:m4urQ5YRQPAdItUevN4LC5GWWY3XNKyc1zzBkjN+zsVMwBOgEEWrjwc:erQkQPptfvN2C5AYHNpcxzBkBaxYc
- TLSH T13D36334DFB275839523E9BC14AE334B9C5EAD5BD6BB2D3E02E1FCE06204A054974523E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VulnDock.exe
File Explorer
-
VulnDock_windows_amd64.zip.zip 5.1MB
-
VulnDock.exe.exe 11.8MB
VulnDock.exe
- IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
- SHA256 cae172da933ff9ff19e30f380afcfa46f9e1af256b7ca2c39a04e1ea8b24ed03
- MD5 ccc951bb606c804a9e385aaa5c0b8727
- SHA1 8a342fb05236e62fcdd9a02b40a93128102d7157
- SHA512 493456bade874d7e12fdce7ff1c978b70f5df5fd46a0068538b0663960984346d572e67e29c7d51b217c547abe71f19c531e1fd4c13058d3851f7ecc1ec21c3d
- SSDEEP 98304:iqAg5hTv3t0OwAfxJNomJqIw3PZB2YWlg7kDgYZmU39lEs:BDlft04GOqIIZBvoDzmU3ws
- TLSH T106C66B4BEC6950E5C4ADC534CA7692527B727C895B2123D71F60F6282FB7BE06EB9300
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
576192
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcAddress
LoadLibraryExW
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6.0MB
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
808KB
Virtual Size
33.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
124KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
111KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
135KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ