Static task
static1
Behavioral task
behavioral1
Sample
16fd67dedab4267961eb1c34fe24675b92e0298a617196cc47df22c57b5a9e49.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
16fd67dedab4267961eb1c34fe24675b92e0298a617196cc47df22c57b5a9e49.exe
Resource
win10v2004-20230831-en
General
-
Target
16fd67dedab4267961eb1c34fe24675b92e0298a617196cc47df22c57b5a9e49
-
Size
9.7MB
-
MD5
10cefeb47f726632f82b1119cf495356
-
SHA1
7c3c674b8d43e72b358a43b8bc776e119426d873
-
SHA256
16fd67dedab4267961eb1c34fe24675b92e0298a617196cc47df22c57b5a9e49
-
SHA512
43b47c9e39bf19f556ca38e2ee8323dd4933104cd59dce01a177e0b4782359657828635460bedf189f51072d758a6ed359c93eac93cb7892a165bd7bad42fcd1
-
SSDEEP
196608:oTbJ2Wj0Pn4ZKAxkOfR4HJ3RB/BqZmtAf5fJbapB6/jlxnsNhNPn:oFXwPn4ZKzoRCJ3/ZqmtG5Bb7Zw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16fd67dedab4267961eb1c34fe24675b92e0298a617196cc47df22c57b5a9e49
Files
-
16fd67dedab4267961eb1c34fe24675b92e0298a617196cc47df22c57b5a9e49.exe windows x86
c7cc74b62af82ea5029cc38a274c874a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
CreateSemaphoreA
user32
LoadBitmapA
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 8.7MB - Virtual size: 11.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1004KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ