Behavioral task
behavioral1
Sample
16ece5332e2c759f9b614c96552d6fec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16ece5332e2c759f9b614c96552d6fec.exe
Resource
win10v2004-20231215-en
General
-
Target
16ece5332e2c759f9b614c96552d6fec
-
Size
236KB
-
MD5
16ece5332e2c759f9b614c96552d6fec
-
SHA1
95ca07cd5de5069303c5553a98be060586def65e
-
SHA256
d3aa6ffd7eaff03e0ea0ff5bb02aa5e11d6ccaa57c920df8756152312e8f95f1
-
SHA512
ec6bd1a2d836055782163da6ef562cdbc200d02286457fd5197b72eb855d18a9ed37b1e64592dccb8bfe6d6621c177f60d46c382aa3f956b0bbccaf18cd000f9
-
SSDEEP
3072:blN9RkkkkkkTLJ0Y6LFWOlN9RkkkkkkTLJ0Y6LFWemqTpLOdf:5dkkkkkkZ6ZxdkkkkkkZ6ZNVY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ece5332e2c759f9b614c96552d6fec
Files
-
16ece5332e2c759f9b614c96552d6fec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE