Static task
static1
Behavioral task
behavioral1
Sample
16a052dcc5faa9d7be16f91b06284a5f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16a052dcc5faa9d7be16f91b06284a5f.exe
Resource
win10v2004-20231215-en
General
-
Target
16a052dcc5faa9d7be16f91b06284a5f
-
Size
19KB
-
MD5
16a052dcc5faa9d7be16f91b06284a5f
-
SHA1
0895d619b6e1ff337af38b80d6c43113152ec8e5
-
SHA256
65b27ae2636b417700b7d597f3cce5b5ca200faec6d023d79c156d10aeea633c
-
SHA512
0f3862bf45ae4128676c6463e20a2304a890d060a75143a5fb108e74eeb85ced4512f80a6bcf7dab53dc2f8ef1a3bf46a4b4cd36aa4c5288ef6403e6f8e907b8
-
SSDEEP
384:f9BLy1URkKp9VTDHV+kb6mP+zAgtDNSbuuZTdJV2K:frLkU+KjVTDHVB+fzAgtDUbuuZTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16a052dcc5faa9d7be16f91b06284a5f
Files
-
16a052dcc5faa9d7be16f91b06284a5f.exe windows:4 windows x86 arch:x86
27bbe0860df05a758d1be16702f16f93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetFileAttributesA
SetUnhandledExceptionFilter
msvcrt
_sleep
_spawnl
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_mkdir
_onexit
_rmdir
_setmode
abort
atexit
ctime
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
malloc
memcpy
memset
remove
signal
sprintf
strcat
strcmp
strcpy
strlen
strncat
time
user32
GetAsyncKeyState
GetForegroundWindow
GetKeyState
GetWindowTextA
ws2_32
WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
send
socket
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 272B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE