Static task
static1
Behavioral task
behavioral1
Sample
0b16806c17e40eb0299af9484ddb8e95.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b16806c17e40eb0299af9484ddb8e95.exe
Resource
win10v2004-20231215-en
General
-
Target
0b16806c17e40eb0299af9484ddb8e95
-
Size
6.1MB
-
MD5
0b16806c17e40eb0299af9484ddb8e95
-
SHA1
5eabded2ae3141658494f9629b310ac2335c43e5
-
SHA256
4815447c9e834b8b0d04c5365bd87e2232bc3b7865e269a7d1e7e5a9d7b7876f
-
SHA512
da0c0c0ee132eb1a4eb67171b2ccde4e046e30745697afd9e07312319ed54e77a05fadbf58137db17f4439aecf6ef7fc9fe5a7e7608b84885d432dd5f48d97b0
-
SSDEEP
196608:84G5d3QfQiK3uJH5EMr0xf923FmvVLpQdT:84G5dArK3Wo8VANQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b16806c17e40eb0299af9484ddb8e95
Files
-
0b16806c17e40eb0299af9484ddb8e95.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ