MiniTycoon_Windows_Package.zip
- SHA256 b9d8c12b4a9b2e69fdb9f02b04e2a342102b14b00832315ef69a513644e562ba
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MiniTycoon.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
MiniTycoon.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
MiniTycoonSetup.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral4
Sample
MiniTycoonSetup.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
Behavioral task
behavioral5
Sample
Uninstall_MiniTycoon.cmd
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
Uninstall_MiniTycoon.cmd
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target MiniTycoon_Windows_Package.zip
- Size 1.5MB
- Sample261110-1fx7eabd67
- SHA256 b9d8c12b4a9b2e69fdb9f02b04e2a342102b14b00832315ef69a513644e562ba
- MD5 9b2445f9a6727ef54d091a80283ea0d3
- SHA1 f36b9bda7cff38ea4ffb8c637ee6f26b9de9ebb1
- SHA512 91960714026c0ff54b240e32baacffe25614b0a80406f0b1525a3c40870719887086a855298e4f1a4ac4465780f5aaf3850edb3dc4bb30949efa2e7ee6cec96c
- SSDEEP 24576:CIKMO9o1xkDs5V7SmBi8iIFUoj57MGt7woIKMO9o1xkDs5V7SmBi8iIFUoj57MGV:CIKMO9o7XBVv1EoIKMO9o7XBVv1EM
- TLSH T16D75234090E995B0129D886579D60B3F30D1E2A18EEC831DFB1A6D067D5B87CB7D23BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/MiniTycoon.exe unpack001/MiniTycoonSetup.exe
File Explorer
-
MiniTycoon_Windows_Package.zip.zip 1.5MB
-
MiniTycoon.exe.exe 1.7MB
-
MiniTycoonSetup.exe.exe 1.7MB
-
README_Windows.txt1KB
-
Uninstall_MiniTycoon.cmd.cmd .vbs 316B
MiniTycoon.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 16b332c21e161abe53ec5fb7303d58470673651d3a7c926f28767f9875e52dce
- MD5 a1bc5cb04c676e4db7349ccea223874e
- SHA1 87ecc4cb2cfa5aa94446be4fa8a70baf8711114b
- SHA512 cf2ef1511a3878a406f50ce6a2e4cf7a57e14e674ae644b31ebd3d8c279c22cb8df70a731fb6e4986a79107a582baa033c75d01881238870b52cd64a8c42b540
- SSDEEP 24576:ocUmaWwthnTlvMahyUkw0y42y3dwCSPYBwJR:oPmah7BUD7wCfB
- TLSH T16B852A07BCE558B5C0AE92328A76A1527A71BC490F3263DB3E50B37C2FB27D06A75744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
460096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
754KB
Virtual Size
754KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
898KB
Virtual Size
898KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
61KB
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
MiniTycoonSetup.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 16b332c21e161abe53ec5fb7303d58470673651d3a7c926f28767f9875e52dce
- MD5 a1bc5cb04c676e4db7349ccea223874e
- SHA1 87ecc4cb2cfa5aa94446be4fa8a70baf8711114b
- SHA512 cf2ef1511a3878a406f50ce6a2e4cf7a57e14e674ae644b31ebd3d8c279c22cb8df70a731fb6e4986a79107a582baa033c75d01881238870b52cd64a8c42b540
- SSDEEP 24576:ocUmaWwthnTlvMahyUkw0y42y3dwCSPYBwJR:oPmah7BUD7wCfB
- TLSH T16B852A07BCE558B5C0AE92328A76A1527A71BC490F3263DB3E50B37C2FB27D06A75744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
460096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
754KB
Virtual Size
754KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
898KB
Virtual Size
898KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
61KB
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
README_Windows.txt
- SHA256 fce1527050e5b580d8dbb1cd3663c5633b3c5116d33e559c24a8f66b179b03c8
- MD5 574d310d61fb969bbc8eddb027c246a3
- SHA1 b473999204fe3395eb93cc0527e939771888842c
- SHA512 f9f3859e91f61d1def95b3b96d605c688814eeecb5b8f8416cb1a39e041c1529cf89ca0644e7abaa95905f00319058a28252e1220883f0300f23fefb43af9be9
- TLSH T17321869F86339267E9322EF23D0A25DC7B3360B5E142C731186B001976D735246670D6
- MD5 SHA1 SHA512 TLSH
Uninstall_MiniTycoon.cmd
- SHA256 db947f31c6b24cc9062084d48ca84ba3f8a41e5ef77fa11a723e78ab4f16d4d5
- MD5 3014dc0b3214b569a5325509ee24f17a
- SHA1 3fce82bc526e6ab3a2978f451dded8bbe00678e3
- SHA512 6aede90474082ef964b95c103d2bd96080bf2e5d14a3472cf51b134a64a92616680ff54e8946e2d84e3ad77457c1cb8d027e0e0fc2b8201f034ca93690c6f64b
- TLSH T1AFE026B750330151C9BD36843E8C294F3B6898DE92269FA8A89900E9588A1BA80270C1
- MD5 SHA1 SHA512 TLSH