Static task
static1
Behavioral task
behavioral1
Sample
16e82875734fa7ff55f08e394a75b268.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16e82875734fa7ff55f08e394a75b268.exe
Resource
win10v2004-20231215-en
General
-
Target
16e82875734fa7ff55f08e394a75b268
-
Size
106KB
-
MD5
16e82875734fa7ff55f08e394a75b268
-
SHA1
e99c1b750483230240c950bccd6fbc3ee7a0d31b
-
SHA256
ddaab9a67fba28e5f7602d57a10560eefe50fb3213a26f72fc68fc71c6ea8cb6
-
SHA512
b6458e9943a4a2fbd2a56571cc2c30257e17c911272cd3f2e2376323bc340225f2a8ac9f84df2850e729bb139b2d1dae1bb1dfbd0ae49f2dacdd322a2ad33282
-
SSDEEP
3072:pq7RAqrUXaLHUtoICOA+nyw+5XUTeCPXlQRGe:pq7Wqn0eICOHn9e8V1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16e82875734fa7ff55f08e394a75b268
Files
-
16e82875734fa7ff55f08e394a75b268.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE