Static task
static1
Behavioral task
behavioral1
Sample
16ba8c19e7b7372c0fafa278b9079c52b2a62412bdead9a667ede17e7bc2b2bc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
16ba8c19e7b7372c0fafa278b9079c52b2a62412bdead9a667ede17e7bc2b2bc.exe
Resource
win10v2004-20230915-en
General
-
Target
16ba8c19e7b7372c0fafa278b9079c52b2a62412bdead9a667ede17e7bc2b2bc
-
Size
563KB
-
MD5
0f867847cef2d53bc09d1b5ab6fb6f96
-
SHA1
bbb1a9ac5ca9f40b83b6876ec2f8aab035d3c5ec
-
SHA256
16ba8c19e7b7372c0fafa278b9079c52b2a62412bdead9a667ede17e7bc2b2bc
-
SHA512
c05bf7baf08e79c0c5535b488e1df0c8abb90492af6f22246195e3ecf2b9b5c945ad5cb84c2a23f2f006d46b7783a91fa6f6ce9727deeb9f457470c0c2ca42dc
-
SSDEEP
12288:/7+LLc+Gl3DflwlLrfw+fZdI+eN9K61cNiSvSGtTnOmyMcp7YJhnRw:/7yc+qILkOdIdcN/vvtTObMceJhRw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ba8c19e7b7372c0fafa278b9079c52b2a62412bdead9a667ede17e7bc2b2bc
Files
-
16ba8c19e7b7372c0fafa278b9079c52b2a62412bdead9a667ede17e7bc2b2bc.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE