Static task
static1
Behavioral task
behavioral1
Sample
6a8a1de22320a4f52baf0f7aadd6282dbb754f908986330f2c4f0ed0fb873eff.exe
Resource
win7-20240903-en
General
-
Target
6a8a1de22320a4f52baf0f7aadd6282dbb754f908986330f2c4f0ed0fb873eff.zip
-
Size
5.6MB
-
MD5
4e57b0af4aaa2b3bb6025ff4ed410cef
-
SHA1
84f9a13289b7fb27784d60c89d1e45d9f01c4632
-
SHA256
6a8a1de22320a4f52baf0f7aadd6282dbb754f908986330f2c4f0ed0fb873eff
-
SHA512
d664ab36ba474083516427da370e9d487dd8e04233f219e887940945c3465b262095947c00342afd450069335223e44ce78cb9928e8f587164e9cffe1b022f97
-
SSDEEP
98304:MlsjEYVXcp/iU6dae09scZhCqwgZIJbU7MAITViUiWV92ujKTwoVFFuo/XVBh5g:mcXc9iPOVhwC8Q7MAYsUiWVTj8Jf/XVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a8a1de22320a4f52baf0f7aadd6282dbb754f908986330f2c4f0ed0fb873eff.zip
Files
-
6a8a1de22320a4f52baf0f7aadd6282dbb754f908986330f2c4f0ed0fb873eff.zip.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ