Static task
static1
Behavioral task
behavioral1
Sample
16436a661dd5b48e474da8d40c980bdd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16436a661dd5b48e474da8d40c980bdd.exe
Resource
win10v2004-20231215-en
General
-
Target
16436a661dd5b48e474da8d40c980bdd
-
Size
6KB
-
MD5
16436a661dd5b48e474da8d40c980bdd
-
SHA1
51e2756f50545ffe1e6bea4bbfe396a7520537ab
-
SHA256
56b0cd4baec72f65faea391a93e40fc8322811ba59627e09bf841afe60d0038b
-
SHA512
bfe2de16f045306da047e7e5a4598a5cc0a113127b7894741c4b73a1d3c81c781f62a22dfe166099a64b568cc41ccc75ffd7f6e047606317661510733c797799
-
SSDEEP
96:RzsFvetnYKXacttnKuBL+Km/RDES59MD/J8mliuWfepshWZOoIAZ4zIX:RzsFGtnrXa0J38lRAS5SDBtl26ZOCKMX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16436a661dd5b48e474da8d40c980bdd
Files
-
16436a661dd5b48e474da8d40c980bdd.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 5KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE