Behavioral task
behavioral1
Sample
16cf14062d049873be7cde0bb41e92e2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16cf14062d049873be7cde0bb41e92e2.exe
Resource
win10v2004-20231222-en
General
-
Target
16cf14062d049873be7cde0bb41e92e2
-
Size
10.2MB
-
MD5
16cf14062d049873be7cde0bb41e92e2
-
SHA1
8a7c4a6cd7a4f943108fa3b83572ee291962bad6
-
SHA256
152ebe64ceb05d630d2eb9e47f0b406fef841fa00619ecf34c552df8db3c1005
-
SHA512
bec6b70f0e68132cf266de748ee69e898fd5d5f4ab5dfa8679cb84a655cfef4086a2c3a3f5944b74704e3465e1371f607fdb61b2e3351d78f55f2cbdffa1ac26
-
SSDEEP
98304:2kaAaDC7BVMT3Ie3waHSMynyJLA3z6W3ekzqIjCV3Ie3waHSMynyJLA3:2kaVqBx0SJyQ6W6m0SJy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16cf14062d049873be7cde0bb41e92e2
Files
-
16cf14062d049873be7cde0bb41e92e2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE