Static task
static1
Behavioral task
behavioral1
Sample
16eec1411e083f9ca1f89430c78023d794ada4ca23c18d09893c302ea1dc431c.exe
Resource
win7-20230831-en
General
-
Target
16eec1411e083f9ca1f89430c78023d794ada4ca23c18d09893c302ea1dc431c
-
Size
5.1MB
-
MD5
8b81c55b63c701502e352b8bb7825255
-
SHA1
d8caf51b779339e39c620acb074e6201e4b9b0fe
-
SHA256
16eec1411e083f9ca1f89430c78023d794ada4ca23c18d09893c302ea1dc431c
-
SHA512
cafada8f88b7b85b7130d6937952e46bc990b64d7d1a3fa56b9b0b0bf50f1aaf03c68d79943567fe6825be6098b40284f214fcf0cba080a4f1feaaba7953410d
-
SSDEEP
98304:EV5jk5w05KssX+EzVFB/FJIvryrNmq1Tx7PbQ0V6pPcLx+N3tmQkBRWg:kJ6buOEZFHJIzyZmWvQgOex+N34Bg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16eec1411e083f9ca1f89430c78023d794ada4ca23c18d09893c302ea1dc431c
Files
-
16eec1411e083f9ca1f89430c78023d794ada4ca23c18d09893c302ea1dc431c.exe windows:4 windows x86
c4d1f5a193b3592633b5c924730d7a75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadStringW
shell32
SHGetSpecialFolderPathA
ole32
CoCreateInstance
gdi32
DeleteObject
comctl32
InitCommonControlsEx
wininet
InternetOpenA
gdiplus
GdipSetClipRegion
atl
ord42
shlwapi
PathRemoveFileSpecW
crypt32
CryptStringToBinaryW
msimg32
AlphaBlend
oleaut32
VariantTimeToSystemTime
Sections
.text Size: 5.1MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE