6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c.zip
Size 1.4MB
Sample260528-2ntdvsd12w
SHA256 ff33d754d158e0733960e78743eb05ba8c330492f50119c2c4465f383477bb24
MD5 c0b12bf874e2304c7970861459c70e72
SHA1 7584e0ff9f2e385f1de4144986407cd32892e497
SHA512 0f11da206f8ba66476c2a7d54049e7ae32dc554fd0cfc3afdd384149e66af7273bd20d3d99ba4b5d09e2b0ec722459cc15dde07f06e593ee5bf4d86287f8c62a
SSDEEP 24576:hhu403X5Vc0H0jhCsBMt7HLs/e1VdpjiQzz2QzkQkQF1WS1XQTfgNUbEE4kL2J1M:hhW/c0HgJOJIm1V/Tzzfz+l7gNUbEeU2
TLSH
T181653348370624D5E2378B732685C52EC98B2BFA7FD80B411934DF04ABB66C4739BA4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c.exe

File Explorer

6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c.zip

.zip 1.4MB
6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c.exe

.exe 2.4MB

6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c.zip

SHA256 ff33d754d158e0733960e78743eb05ba8c330492f50119c2c4465f383477bb24
MD5 c0b12bf874e2304c7970861459c70e72
SHA1 7584e0ff9f2e385f1de4144986407cd32892e497
SHA512 0f11da206f8ba66476c2a7d54049e7ae32dc554fd0cfc3afdd384149e66af7273bd20d3d99ba4b5d09e2b0ec722459cc15dde07f06e593ee5bf4d86287f8c62a
SSDEEP 24576:hhu403X5Vc0H0jhCsBMt7HLs/e1VdpjiQzz2QzkQkQF1WS1XQTfgNUbEE4kL2J1M:hhW/c0HgJOJIm1V/Tzzfz+l7gNUbEeU2
TLSH
T181653348370624D5E2378B732685C52EC98B2BFA7FD80B411934DF04ABB66C4739BA4D
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c
MD5 9ef6c754f6e71ffbc4bf42b5405df6c6
SHA1 841093175911833a74a434adc5b7d0ba057b0fab
SHA512 7db189a92b7c8d0fe550c1129a21c7aac62dccbd49b88855c60e16a4fde53a32f1081907477069cafe250589edfbcef6762deafedbc575d822ba7643c8caf076
SSDEEP 49152:L1sdd0NV0FwgEAMEcQx3nqfN74xztQ6JLXJqO:L+MO0xpcnqlcxzBJL5Z
TLSH
T1ECC58C0B6CE109FAC46A633289A766917B75BC490F3263C72E60B33C2F726E45D39754
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

PE Signature issue

Digest

7d:f1:9e:0d:82:d8:01:3b:c9:ba:16:8c:f5:41:8f:52:4c:96:c0:f8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=quiverquant.com

Chains

May 27, 2026

CN=quiverquant.com

Minor OS version

Major OS version

Entry point

468544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

617KB

Virtual Size

616KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

59KB

Virtual Size

352KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c.zip

6baf80c1eeefc7c02d0ad16cdc5e375253bf104e7915f8ececacd8f4b372d15c.exe

PE Signature issue

kernel32

generic