ShulkerV2 3[.]2[.]8 - license patched[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
ShulkerV2 3.2.8 - license patched.zip
Size 14.8MB
Sample261113-e2agkszx3m
SHA256 d12a580bfe4a906f23de6c9284df586d89405fde330383022c429a1e498c9019
MD5 f62b08ea8ffea157cba65e04fccfe6ab
SHA1 e98269c3d1bfd8375fdf14b214538c217a62ce63
SHA512 d7b69baec3651c07f9c9b68c655d8ca293b67310c3c3d77ff2b25de78293f63ad1b37db2c6cfcc362a39677050196cf20915bb6fc79a00fc537c3d13110cab9f
SSDEEP 393216:HY3HdcFiM7PFUslHUzaMy/KPke5VIGvX8:HSdHMLa4/Mbns
TLSH
T115F633C8ACD4AC82F0C6DEDE543CE1986AE73E65F5C91291D69157DFC62F50B8008BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ShulkerV2.exe

File Explorer

ShulkerV2 3.2.8 - license patched.zip

.zip 14.8MB
ShulkerV2.exe

.exe 14.8MB

ShulkerV2 3.2.8 - license patched.zip

SHA256 d12a580bfe4a906f23de6c9284df586d89405fde330383022c429a1e498c9019
MD5 f62b08ea8ffea157cba65e04fccfe6ab
SHA1 e98269c3d1bfd8375fdf14b214538c217a62ce63
SHA512 d7b69baec3651c07f9c9b68c655d8ca293b67310c3c3d77ff2b25de78293f63ad1b37db2c6cfcc362a39677050196cf20915bb6fc79a00fc537c3d13110cab9f
SSDEEP 393216:HY3HdcFiM7PFUslHUzaMy/KPke5VIGvX8:HSdHMLa4/Mbns
TLSH
T115F633C8ACD4AC82F0C6DEDE543CE1986AE73E65F5C91291D69157DFC62F50B8008BB8
MD5 SHA1 SHA512 SSDEEP TLSH

ShulkerV2.exe

IMPHASH e6c6166959e9db1494bb9a620affb282
SHA256 3544dd04c949ca603e4ae57364796eb9286801e9e4c4712e8bd98ba8d2666d5f
MD5 36bfbab4cdb7479161a8d828e4813a0c
SHA1 71c395e8f21a8cb2a838ff545aa2f55f5281a1d6
SHA512 2256b8289c4804e0b4a97d5ad62864593a6f15cf056fbe333bea6eb90bda0a4e54aaaaa742633bfdec88b83ceaf8aa883e7b40ae366d489ed590a2974bfb4f1c
SSDEEP 393216:u+/Tj2liKjFhe6LfKRQuqHI7sAdX+Ot9:u8jfKBsAHK11
TLSH
T1C5F63388DC94AC42F0C2DEFE542DE298AAE73E54B6C112D3D6D1679FC62F5478108BB4
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14.7MB

Virtual Size

14.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

168B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ShulkerV2 3.2.8 - license patched.zip

ShulkerV2.exe

ntdll

kernel32

user32

generic