6e3d9e1503309cab4f0ef335a55264eb04dec4455cfa5b778ccfc0dfd50ed06c
- SHA256 6e3d9e1503309cab4f0ef335a55264eb04dec4455cfa5b778ccfc0dfd50ed06c
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a.exe
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target 6e3d9e1503309cab4f0ef335a55264eb04dec4455cfa5b778ccfc0dfd50ed06c
- Size 403KB
- Sample240831-p724wsvbrd
- SHA256 6e3d9e1503309cab4f0ef335a55264eb04dec4455cfa5b778ccfc0dfd50ed06c
- MD5 dad0a1223e26a6c79d1b5dbd783794c2
- SHA1 ff96633d901f2075b7cc6ea42c7004418180c5cb
- SHA512 27b3e43ae2f5aa1bce9e939f2943221c30121888a37fb4cb08375c54f4c3c874ed16afd65a2c17bd7dbb9ed5af546d511f620db321efe2a2ef5b737c299aadd7
- SSDEEP 12288:AVzrqMm8kW9KHXFJa/FTx0X3xi0U2nPfkP1Q:8QJW9Kfa/FVcUIPK1Q
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a
File Explorer
-
6e3d9e1503309cab4f0ef335a55264eb04dec4455cfa5b778ccfc0dfd50ed06c.zip 403KB
-
55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a.exe 582KB
55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a
- IMPHASH 6a88739b00d2f75a49bbb4078e077ebf
- SHA256 55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a
- MD5 ab9e5ea06c7a9b6d7aef25faecc2e201
- SHA1 d1cfdbc2a53f8328e20d8e8c024352a3eb1747a2
- SHA512 6baa03fcb65aa299ea882e746d39bba7c593ba2677ccc9ebefcddf2788f1edbda01ed9f3f3bb5acdb3f8510c3be4d43a2449afbd456a15cad5864fd33069d083
- SSDEEP 12288:cCOL6o9tvrbinB0lB5neKn9mbrJo2akpJjX5YwItb:fOLLTgQe+Mbr3PXK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
357120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\zucafupoto\vidar35\fagufidoto\xonajijiti-vuyekeneh\nunoxor.pdb
kernel32
GetSystemDefaultLangID
ExitProcess
GetConsoleAliasesLengthW
GetCPInfo
InterlockedDecrement
AddConsoleAliasW
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
SetFileTime
CreateActCtxW
GlobalAlloc
GetConsoleMode
TerminateThread
GetVersionExW
IsBadWritePtr
FileTimeToSystemTime
LocalHandle
GetEnvironmentVariableA
CompareStringW
lstrlenW
VerifyVersionInfoW
GetStartupInfoA
FindFirstFileExA
GetCurrentDirectoryW
GetLongPathNameW
SetLastError
GetProcAddress
WriteProfileSectionA
CopyFileA
GlobalGetAtomNameA
SearchPathA
ProcessIdToSessionId
OpenWaitableTimerW
MoveFileA
SetCurrentDirectoryW
WriteProfileSectionW
GetModuleFileNameA
WriteProfileStringA
GetModuleHandleA
GetProcessShutdownParameters
FreeEnvironmentStringsW
SetFileShortNameA
TlsAlloc
GetWindowsDirectoryW
DeleteFileW
LocalFileTimeToFileTime
GetStartupInfoW
HeapValidate
IsBadReadPtr
RaiseException
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
GetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
SetFilePointer
WideCharToMultiByte
GetConsoleCP
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoA
LoadLibraryA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
Name
.text
Size
479KB
Virtual Size
478KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
41.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=149, productName=VS2008 build 21022, version=21022,
count=131, id=131, productName=VS2008 build 21022, version=21022,
count=56, id=132, productName=VS2008 build 21022, version=21022,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=127, id=1, productName=Unmarked objects,
count=1, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,