Static task
static1
Behavioral task
behavioral1
Sample
16c5959097d84e7d98fa0a85809911ff.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16c5959097d84e7d98fa0a85809911ff.exe
Resource
win10v2004-20231222-en
General
-
Target
16c5959097d84e7d98fa0a85809911ff
-
Size
105KB
-
MD5
16c5959097d84e7d98fa0a85809911ff
-
SHA1
6889c9bb40cc4a48f86d113531d469ce1f16d3ad
-
SHA256
818e68a87d4193e41c7a8d3a4f48114f26b69959bbddada2430ab56111a1bc26
-
SHA512
214e0fa982aa08f74cc37c86cf2e70489ec15bfa25f7ec04d3ec77441ebf5a40d5a55dfbd16ec429cd1a2436d5532e3c8e06071ab4e62bd4a4d8e12dde6e1320
-
SSDEEP
1536:bJbJy9M98y2aREsAQ87eUrydxgLpv0o1MYzZmSWaNStBhY4ETPaWUx7F:lFx8y2zd71u0LpfMgmaNStzY4ETyW2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16c5959097d84e7d98fa0a85809911ff
Files
-
16c5959097d84e7d98fa0a85809911ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
lblz89f Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8kdivl Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdcm Size: 471B - Virtual size: 509B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE