Static task
static1
Behavioral task
behavioral1
Sample
16a401439ea53893583518796aa475ea.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16a401439ea53893583518796aa475ea.exe
Resource
win10v2004-20231215-en
General
-
Target
16a401439ea53893583518796aa475ea
-
Size
2.5MB
-
MD5
16a401439ea53893583518796aa475ea
-
SHA1
69cf2bfc3dc8f81ae96fc18279ae717ee05d5ddc
-
SHA256
30e71d29e1e01fcf27ae7c8d5ea1399fcaed47e9279c0b9a5d20c1fc4dd507f7
-
SHA512
f8affcf7ac3197e6beaf7797f64e6b8729ea657e18c3848050a30e3c8da28dd497911a692dd89a64ff05702d7eb32ff2f3a9e9ec3c28a193e3ebc9267d02c632
-
SSDEEP
24576:Sqdl2qa8O+A7wnNTBiRXDVSI8LUlFl5Fp7Zqhae16CGbfxEXYGaKqM:SqSsOxwnNTBi9cY/7ZqhaK6zbfqdl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16a401439ea53893583518796aa475ea
Files
-
16a401439ea53893583518796aa475ea.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ