Static task
static1
Behavioral task
behavioral1
Sample
161f96682efc2ec4c93499e87d43c627.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
161f96682efc2ec4c93499e87d43c627.exe
Resource
win10v2004-20231215-en
General
-
Target
161f96682efc2ec4c93499e87d43c627
-
Size
573KB
-
MD5
161f96682efc2ec4c93499e87d43c627
-
SHA1
a166472b16f65f1ec6af90d68c4877f7f1e5981a
-
SHA256
a21a2745632989d628b864c6b8e883a3e0088939b7b077e4b00dfc6f26a663a0
-
SHA512
4bf8ab68e9b3cd303c578f97a257fddaacfc19afca15bcffd27c6c447e1e888ce4cbb87ef04890171c34cf99b0e0733b7dade68342ac8d6ff43cbd3858c344fc
-
SSDEEP
12288:goJbqCbYMxt34TeJXKXTj8t1Pgl3qgFrU9obHsuTzu:gUGCbYeIvPVZCaA2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 161f96682efc2ec4c93499e87d43c627
Files
-
161f96682efc2ec4c93499e87d43c627.exe windows:5 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 404KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE