Static task
static1
Behavioral task
behavioral1
Sample
16f40d62d8cef914556fd2b30660d1ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16f40d62d8cef914556fd2b30660d1ba.exe
Resource
win10v2004-20231215-en
General
-
Target
16f40d62d8cef914556fd2b30660d1ba
-
Size
150KB
-
MD5
16f40d62d8cef914556fd2b30660d1ba
-
SHA1
057ce20440fab17183607332c9117ae3b48d07e6
-
SHA256
952613f4bf9afff9404ee2362076e4040ef236bc4cdc28e44e2a61fe8977235e
-
SHA512
0eff30a1f8a1ee9cbead9b083ecff14e5340095d40746a8abe12b3574953cc66fe5517496532abe2b63f788ad5d17ead072eb5417dd78025ab60669cb3970f23
-
SSDEEP
3072:mgs2XudKtLbLF+fQ1ilKhGojBL5DgOemTxdufr1dsBVwus7JV0eUlLIOIEVn9:Hs2XHRbfCKrjv1dufr1dsBVwueJVveu2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16f40d62d8cef914556fd2b30660d1ba
Files
-
16f40d62d8cef914556fd2b30660d1ba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10.0MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ