Static task
static1
Behavioral task
behavioral1
Sample
6f6350713b0963bd3b6e3ffda70bbfe0b69c2a44efcffbd09d64699b756e6e05.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6f6350713b0963bd3b6e3ffda70bbfe0b69c2a44efcffbd09d64699b756e6e05.exe
Resource
win10v2004-20231215-en
General
-
Target
6f6350713b0963bd3b6e3ffda70bbfe0b69c2a44efcffbd09d64699b756e6e05.exe.zip
-
Size
48.4MB
-
MD5
b5cfbfbb9f94068c2d4f8590d1f2e037
-
SHA1
6510a85f928eea65ece068103fcdea25d5df1d48
-
SHA256
03cfa175d93413e502d92ebb704c1de2d88786975fdd824aadd7aaf631352394
-
SHA512
df7b859a2df605fb1bbb2d8ab66ae0a2eb560f4ffe58583a3af46c554e470e7adec777a8292ca4a862bdd8cb3751292e0c6cac90d13304268e8d31cedfb48613
-
SSDEEP
1572864:Kcrkx8q4VCXDnXkZy8UJ639l7x5edkkSRG3FX4:KR8qOOD8UM9bULoG1X4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6f6350713b0963bd3b6e3ffda70bbfe0b69c2a44efcffbd09d64699b756e6e05.exe
Files
-
6f6350713b0963bd3b6e3ffda70bbfe0b69c2a44efcffbd09d64699b756e6e05.exe.zip.zip
Password: infected
-
6f6350713b0963bd3b6e3ffda70bbfe0b69c2a44efcffbd09d64699b756e6e05.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 49.0MB - Virtual size: 49.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ