Static task
static1
Behavioral task
behavioral1
Sample
a16e5f8a5eeec1898ca277af87425e64.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a16e5f8a5eeec1898ca277af87425e64.exe
Resource
win10v2004-20230703-en
General
-
Target
a16e5f8a5eeec1898ca277af87425e64
-
Size
2.3MB
-
MD5
a16e5f8a5eeec1898ca277af87425e64
-
SHA1
fde43257c886a5ccfae2886d905d4198fe7d6341
-
SHA256
2f3fb721016f71d1fa9b585b77a4b11e7811cbbcffbff4d9bb09e4e68d9f0d8f
-
SHA512
2c7bef5b14cce0e6d428cc23d865631cfa993f58bd6acf44ca74cb2cdf477947f45b44a2fecd7a7a27e5fc590ed31dcfb351b458a406e35fa0916b0a68d34a3e
-
SSDEEP
49152:hW3wbM8xxK85jL6Nwhwz4wXNOPmUARPWK5fc69d4Ixc:SwbMJ8ZL6IwBqAcKtDj4IO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a16e5f8a5eeec1898ca277af87425e64
Files
-
a16e5f8a5eeec1898ca277af87425e64.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ