Static task
static1
Behavioral task
behavioral1
Sample
1667160e56e09b7490908365a4b27f76.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1667160e56e09b7490908365a4b27f76.exe
Resource
win10v2004-20231215-en
General
-
Target
1667160e56e09b7490908365a4b27f76
-
Size
512KB
-
MD5
1667160e56e09b7490908365a4b27f76
-
SHA1
3aac5eef5729037ecc18c7e8b9db8cda12773416
-
SHA256
7fbab63c8c830352810355b543af901191b615a8c9386ea583058b510b93059a
-
SHA512
b1185ac5a7669cd5e63f29506bfc8847abad1abd9ba6beb31b5c1fd7b1f6af21ffbac86107ba7fb3cb95ea1bd1648618f8ee6219c0971f4a3a925098a1dd0dff
-
SSDEEP
12288:nsU1gVTJinN1FJKD7hvlnEBv+jjWJHL9sUNrAg1y5LK:nsUi1oPK3hvOv+jjqLOirA4yY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1667160e56e09b7490908365a4b27f76
Files
-
1667160e56e09b7490908365a4b27f76.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 31KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
workstat Size: 475KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE