Static task
static1
Behavioral task
behavioral1
Sample
216134e618263f4d03cd1ed23a9be73ae8ea7b052aa609265e27b9a4fe612636.exe
Resource
win10-20231020-en
General
-
Target
216134e618263f4d03cd1ed23a9be73ae8ea7b052aa609265e27b9a4fe612636
-
Size
4.8MB
-
MD5
5fd5785abb3d2ebb2a0953536339200b
-
SHA1
8f378feda052f9aba3e36524116cce7bf9afe456
-
SHA256
216134e618263f4d03cd1ed23a9be73ae8ea7b052aa609265e27b9a4fe612636
-
SHA512
6f12811150c689f789d7e1bec8d98e5401486e71bd45ffee826f86f98b1329a316b37b563928ec68ceeed7e9a7aefdbe3b7841456b50060c7e2bc1baef3b2b92
-
SSDEEP
98304:BoMd9WqCSk4EGkBijqVx8g2E33MyyLF1qbVA4ZVJc1GlE:u6KSkukgj4BBaLFCrVJc1Gu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 216134e618263f4d03cd1ed23a9be73ae8ea7b052aa609265e27b9a4fe612636
Files
-
216134e618263f4d03cd1ed23a9be73ae8ea7b052aa609265e27b9a4fe612636.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ