Static task
static1
Behavioral task
behavioral1
Sample
16511a567bf128d4571e7c92963da20d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16511a567bf128d4571e7c92963da20d.exe
Resource
win10v2004-20231222-en
General
-
Target
16511a567bf128d4571e7c92963da20d
-
Size
52KB
-
MD5
16511a567bf128d4571e7c92963da20d
-
SHA1
341d272c4d5973cc65c2cf3e1e20968b49b40aa1
-
SHA256
e7becc555093be7dadf98095234dacdf725d85463596c29443142645679b75ab
-
SHA512
dbbac8f5a6a2e0e4df105f8dd65e55b1ad74a9ba7703aa7a1d13bb547a2bf82477558950010ac43aeeb4e1548880f1b378fa7febdb76cfcfd4f69a2bca9cf1e1
-
SSDEEP
768:JoeW9ISI/GLN+RBSsPe78po8w8LleFbo1Ri1B9nv/Si6wooGbP:JoeWK3GZmsQi0OTqoIP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16511a567bf128d4571e7c92963da20d
Files
-
16511a567bf128d4571e7c92963da20d.exe windows:4 windows x86 arch:x86
919541169e4e065626f842e35e0e33e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetLastError
ReadFile
CloseHandle
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE