Static task
static1
Behavioral task
behavioral1
Sample
16ba659a72c34e7dca823e2f5d1d7b2a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16ba659a72c34e7dca823e2f5d1d7b2a.exe
Resource
win10v2004-20231215-en
General
-
Target
16ba659a72c34e7dca823e2f5d1d7b2a
-
Size
80KB
-
MD5
16ba659a72c34e7dca823e2f5d1d7b2a
-
SHA1
f837cec55a060a5140b153d5424a6d47e3afe391
-
SHA256
eb11c466cc2102e6d6f7da01ee80ea4dd46e739a6e57cb8cc1f52d45034b7bbb
-
SHA512
280717f23e0689ba1a85779a88b0706e19e7097d66992425351a4b25f1d82cee32135c446e99df3b8ff8ef6e04355d272e66cb899703fdfdf653593b87103a1c
-
SSDEEP
1536:uoa5Q2fRFBzfMwz0VErxUAvUehTgTNda88r2sIrWVmQ1JKsQ9ngc6td:jX+RoC1Vcei3a88rrpPKsQ9ngD7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ba659a72c34e7dca823e2f5d1d7b2a
Files
-
16ba659a72c34e7dca823e2f5d1d7b2a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 4KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE