Static task
static1
Behavioral task
behavioral1
Sample
16e50005db782a7c6b129e6b90b62d7e47afe3bf6550938c1200af96a09e9c86.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
16e50005db782a7c6b129e6b90b62d7e47afe3bf6550938c1200af96a09e9c86.exe
Resource
win10v2004-20230915-en
General
-
Target
16e50005db782a7c6b129e6b90b62d7e47afe3bf6550938c1200af96a09e9c86
-
Size
3.5MB
-
MD5
206091a4919a71c65b4c0c8839040d23
-
SHA1
047e1c8d48e1780ff088747a0a60165dd4f2f27e
-
SHA256
16e50005db782a7c6b129e6b90b62d7e47afe3bf6550938c1200af96a09e9c86
-
SHA512
f318b156a4cd12ec8fa13254f5bcac84460809e9be8d4ed27f2bfed1caf03b93f7a831048c58990ec65011ee929efee82d23bf13866b26da5570995e0ce89bd5
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlgRJ3r/uyIhj2X+RHL6Fz:c+8X9G3vP3AM6J7/uyIhyXw+Fz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16e50005db782a7c6b129e6b90b62d7e47afe3bf6550938c1200af96a09e9c86
Files
-
16e50005db782a7c6b129e6b90b62d7e47afe3bf6550938c1200af96a09e9c86.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ