Static task
static1
General
-
Target
Geme.zip
-
Size
628KB
-
MD5
4e54ef1d307ce04a7b252644bc24d2ba
-
SHA1
cecf6ec93f9b47fe9efcdfa3ab0fdfd12d03ef48
-
SHA256
b1549f601a9c3ce10ca75da5f523b2476f6c505ccf2b429b7012c1a5deef4322
-
SHA512
cabaa75a5a678871d8110ea01159c202866b57de9abb1280680562c09b50a4ce7f75ea8b619750c1453b7b1bda40a55dd989d3c28ab68b346e11cd0ab832523f
-
SSDEEP
12288:+0NqaI7CdmRDn9jTkF3tHyBTwSUEm67zwudrA2UUu8chbpEIGvBi:PNdI7CaTkptSBTwSUy7kulA2bWg5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Geme.exe
Files
-
Geme.zip.zip
Password: infected
-
Geme.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 731KB - Virtual size: 731KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ