Static task
static1
Behavioral task
behavioral1
Sample
hwid.kms38.gen.mk6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
hwid.kms38.gen.mk6.exe
Resource
win10v2004-20220812-en
General
-
Target
MDE_File_Sample_40779e9f591f0ae04e6967095b4974d04a5f2984.zip
-
Size
2.7MB
-
MD5
ff1a50083ed22eb628090a6970b8b32e
-
SHA1
6fa1a2b53e5abf7847d5c99c947b9f7d1faefb12
-
SHA256
403d7d8f2bad2df8641279b9fb1d5e890007d61e53b3bf2f82a9a8cefa1ea155
-
SHA512
f4bf38062184f247dfc408aff2496d92453ee417b86997d3343be3a8fb736d3039c878d2efd09c04e7c91240eff1d97fd1d1e3c1010d271a4efe944764d9c69b
-
SSDEEP
49152:ULZHCfqlULOYHba4cxGr4zNP5Jdi4kJtRHTRMH17oyKhMQiRLoRL:UtifCULn+tW4zbi4kFHdMH17oyKhsC9
Malware Config
Signatures
Files
-
MDE_File_Sample_40779e9f591f0ae04e6967095b4974d04a5f2984.zip.zip
Password: 12345
-
hwid.kms38.gen.mk6.exe.exe windows x86
Password: 12345
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
%$*& Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
&*$% Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE