Static task
static1
Behavioral task
behavioral1
Sample
6bdc28b673d25481a7a5828aca6efd87d2c90b14.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6bdc28b673d25481a7a5828aca6efd87d2c90b14.exe
Resource
win10v2004-20240802-en
General
-
Target
MDE_File_Sample_6bdc28b673d25481a7a5828aca6efd87d2c90b14.zip
-
Size
4.4MB
-
MD5
a52c32527253d8a18c67d5e1e814c230
-
SHA1
1b0e818f1f759a93b774f770ed14a4fd151f2be7
-
SHA256
9e565f66cf462a6438bfb615dfe4db4189f5705339c41d6e74e1bcbaa829f636
-
SHA512
6a421595ce4b1cbb7c0bb9349d0c9c91762404abb68d2bfb0d8b6edd998e92fd7ee4fe44910dd9d85ec26ecbaa464503820f767969c548a931d0203351a21c02
-
SSDEEP
98304:sA5y4/NOfuhlaMvSJtZ6B52fSg1Z01yNnX3oUUl9FF4pg:/ySNG5CcZ6B5eSgDSyNIUUhF4pg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6bdc28b673d25481a7a5828aca6efd87d2c90b14
Files
-
MDE_File_Sample_6bdc28b673d25481a7a5828aca6efd87d2c90b14.zip.zip
Password: 123
-
6bdc28b673d25481a7a5828aca6efd87d2c90b14.exe windows:4 windows x86 arch:x86
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ