Static task
static1
Behavioral task
behavioral1
Sample
LEVEL6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
LEVEL6.exe
Resource
win10v2004-20231215-en
General
-
Target
636a970750b7ed2129d40562d8f2e148
-
Size
11KB
-
MD5
636a970750b7ed2129d40562d8f2e148
-
SHA1
1268d8645723f68c55d217d2c61607c602c8799d
-
SHA256
0ecfa69f1289b4b34e638baceeb58ab3c2340e65eb6d7c45dc2affe7a63465ee
-
SHA512
229a2313e2f4fe7ed46d3af33e36ed03676e019e1c5b8e0447829a09e6adb34263e467b13f4e57dcc475502b309250836b0fb536f3d22f4bcdc8e10cf2c2bb8b
-
SSDEEP
192:4naY0bWrZWBxVKM4sxDSeDP3YpspY1ttjBiXSf4mCN4EXKKwexmS9fcyXjPsNc:410bWV+Q0tD2sALwmXVKweN+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/LEVEL6.EXE
Files
-
636a970750b7ed2129d40562d8f2e148.zip
-
LEVEL6.EXE.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
LEVEL6.TXT