Static task
static1
Behavioral task
behavioral1
Sample
16e0de12ab8f44d0a42efba89d0edfeed246a98fbc3c8ebef5f121d7eec248ac.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
16e0de12ab8f44d0a42efba89d0edfeed246a98fbc3c8ebef5f121d7eec248ac.exe
Resource
win10v2004-20230703-en
General
-
Target
16e0de12ab8f44d0a42efba89d0edfeed246a98fbc3c8ebef5f121d7eec248ac
-
Size
330KB
-
MD5
08c8bd17763495f11ec5dec29f13f8f8
-
SHA1
08102096529f7ad0439a0fa6a4e22d248bdec163
-
SHA256
16e0de12ab8f44d0a42efba89d0edfeed246a98fbc3c8ebef5f121d7eec248ac
-
SHA512
aeefb77d7e3da1c1f39d148c82415323d01303ffd5dbdaceab1712e7edf2bb449d10c5f9e76279e34160353673e705e8d94d5b7c9e22faf431b6288763111b8a
-
SSDEEP
6144:+PBq6UWCwvw6XJqagpwUgOdFYUr1dscT7iFiaFmdFYUr1d+Y:+PBq6UWC6tP2lpGFI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16e0de12ab8f44d0a42efba89d0edfeed246a98fbc3c8ebef5f121d7eec248ac
Files
-
16e0de12ab8f44d0a42efba89d0edfeed246a98fbc3c8ebef5f121d7eec248ac.exe windows x86
1600c9249d642d86b94146111867a84f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileW
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessIoCounters
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LocalFree
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ReleaseSemaphore
SetDllDirectoryW
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcr100
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_dup
_errno
_fdopen
_fmode
_get_output_format
_initterm
_iob
_lock
_onexit
_set_invalid_parameter_handler
_snprintf
_stricmp
_unlock
_vsnprintf_s
_wfopen
abort
calloc
exit
fclose
fgets
fprintf
fputc
fputs
free
fwrite
getenv
localeconv
malloc
memcmp
memcpy
realloc
signal
sprintf
strcmp
strcpy
strerror
strlen
strncmp
strrchr
vfprintf
wcslen
_write
_putenv
shell32
CommandLineToArgvW
libssp-0
__stack_chk_fail
__stack_chk_guard
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ