Static task
static1
Behavioral task
behavioral1
Sample
168b32f5089375fb04e40912ad8b281f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
168b32f5089375fb04e40912ad8b281f.exe
Resource
win10v2004-20231215-en
General
-
Target
168b32f5089375fb04e40912ad8b281f
-
Size
927KB
-
MD5
168b32f5089375fb04e40912ad8b281f
-
SHA1
335d9bff0d20cbddd64a17f3b4033243534ddd85
-
SHA256
03315020cc27f3870d70954dc36a49719116dc37bc709fc6a260679a8b4c0753
-
SHA512
49d543ccff164b63eb517cfc695dd56342daa38128c865dae608fc6fe48560b4e3e9ecca604e06194d93dc09b2e322eb910c78a1fab16a62b45f15b2fe37bb12
-
SSDEEP
12288:td+tksBU+N4c1rwMjGMg1DlBE+hMDJRVI+RbSpnjbshqebBrtTzTkzK/EI8YUIeo:u++NV1ML8VzKsT9FnAK/EI/uK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 168b32f5089375fb04e40912ad8b281f
Files
-
168b32f5089375fb04e40912ad8b281f.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 904KB - Virtual size: 904KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ