lil.zip
- SHA256 8a4010869b199bfa47a8471b4ba341a2da86a59f5aa14117d1b308199420b7e9
Password
43235
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
spidrnun.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
29 signatures
300 seconds
General
- Target lil.zip
- Size 43KB
- Sample261113-ranlcacv8p
- SHA256 8a4010869b199bfa47a8471b4ba341a2da86a59f5aa14117d1b308199420b7e9
- MD5 ee67ddaee415e17f771dac45899be91c
- SHA1 f3d61befcae059e807744b499f450e81be13894e
- SHA512 997a54a559d65527dbbbb879fc056a67b6b603054654dea6061b871ade7b93e59350a56360efd09147dee27693e4e67047f5fa8f64995f3bfce71501d9bf7100
- SSDEEP 768:CHcPB3vX+3pE8puRvLJHXo6qMZBx+oV/u1mp86KBCvG1a/:CHM3vu328sHY9Kr/u1gYMO10
- TLSH T16913F288E2AE80B6F6AA12E77744BB76F88B14C507BBA101D4E73F05B72E510901F5C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/spidrnun.exe
File Explorer
-
lil.zip.zip 43KB
-
spidrnun.exe.exe 121KB
spidrnun.exe
- IMPHASH 5b81edb705c3a4792fad9af4c03063dd
- SHA256 3fda075679565e5f8a68ffa40805202c380ded7f4ba7a13db9ca14b940be1af0
- MD5 b71c918333f9d31c4ae927710a78ad61
- SHA1 23b27238762210af1dfffdccf217ad029f4c5168
- SHA512 4d20749a45b0daed60e0742cc52825d53637458c707faf53de32b38b9a00dd6365a293fa993ddb3c2750ad51503e4c0a2571cdb7acc7d6a55bb6bbbcac0486fc
- SSDEEP 1536:04RHT6fhJ931UDu2WxJj9RskhhJyjgPKUY591zWwn6EDr8mE1QFI1SXkBX0Ccf01:04Vsb3jz0h6EkBEC8DgmB/az
- TLSH T146C307465721EBEBD8018739C4B7022AFA34F1010B575EDB6E454530AF63BE94E7BB88
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
43235
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
ChangeServiceConfig2A
CloseServiceHandle
CreateProcessAsUserA
CreateServiceA
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegisterServiceCtrlHandlerExA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA
user32
BeginPaint
CallNextHookEx
CreateCaret
CreateWindowExA
DefWindowProcW
DestroyWindow
DispatchMessageA
DrawTextA
DrawTextW
EndPaint
FillRect
FindWindowA
GetAsyncKeyState
GetClientRect
GetDC
GetMessageA
GetSystemMetrics
HideCaret
InvalidateRect
RegisterClassA
ReleaseDC
SendMessageA
SetForegroundWindow
SetTimer
SetWindowsHookExA
ShowCaret
ShowWindow
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetDIBits
GetStockObject
Rectangle
SelectObject
SetBkColor
SetBkMode
SetTextColor
wtsapi32
WTSQueryUserToken
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
winhttp
WinHttpCloseHandle
WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetOption
WinHttpSetTimeouts
bcrypt
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptOpenAlgorithmProvider
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memcpy
strrchr
strstr
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vsprintf
fclose
fopen
fread
fseek
ftell
fwrite
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p__acmdln
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_initialize_narrow_environment
_initterm
_initterm_e
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-string-l1-1-0
_strdup
memset
strcmp
strlen
strncmp
api-ms-win-crt-utility-l1-1-0
rand
srand
kernel32
Beep
CloseHandle
CopyFileA
CreateMutexA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetComputerNameA
GetDriveTypeA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetTickCount
InitializeCriticalSection
IsDBCSLeadByte
LeaveCriticalSection
MoveFileExA
MultiByteToWideChar
Process32First
Process32Next
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WTSGetActiveConsoleSessionId
WinExec
lstrcmpiA
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-environment-l1-1-0
__p__environ
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/18
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/58
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/82
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/33
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/47
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ