Static task
static1
Behavioral task
behavioral1
Sample
16kig.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
16kig.exe
Resource
win10v2004-20220901-en
General
-
Target
16kig.zip
-
Size
67KB
-
MD5
9b7f23063f81f7373deeafa7cdcd14c8
-
SHA1
fccb75d9d584d4837f364d10c1c48a40ad1f1c35
-
SHA256
fed782e9db0cf9400480a53980306fffdc0baac9a5594e25058832f361e32600
-
SHA512
80869dfe2ddb98ce609915d6c4818c0df7bb83054c18574425cb2825f4d055da7f34cba7e327d9dbf570c3dc4d76f4a4e93695934426b0b1c5af00483fb6cc56
-
SSDEEP
1536:hXHPxUfpLeWXmiGWHzQQtsN5KVEefzMXxI1VD7pJLojaV/:Rvx4pfmixTqAvrfzD7pJLV
Malware Config
Signatures
Files
-
16kig.zip.zip
Password: infected
-
16kig.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ