Static task
static1
Behavioral task
behavioral1
Sample
161a392d76727fd570a95f839bd2c6e2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
161a392d76727fd570a95f839bd2c6e2.exe
Resource
win10v2004-20231215-en
General
-
Target
161a392d76727fd570a95f839bd2c6e2
-
Size
37KB
-
MD5
161a392d76727fd570a95f839bd2c6e2
-
SHA1
26058c317be294a7ebf5fa77fdb485c9697a6887
-
SHA256
6ab3867ffb24f295dfe1118f039fada6f56bda0a9739e1900822453365238ff4
-
SHA512
8c835875c9f69ccb38407c23d4d3bc3ca71dfa18b405142ad4a1dd18f2c272b364ee83b897dc2c9bfaef532fbe9972ac68ac0f469f38dc30c41b565158bf1017
-
SSDEEP
768:1suI/OOOOmr9CXCTwH0kMsPdmsJsMjdfRV8Cy1:G9H0kM6dzJpdACy1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 161a392d76727fd570a95f839bd2c6e2
Files
-
161a392d76727fd570a95f839bd2c6e2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 867B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rodata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
radata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE