Static task
static1
Behavioral task
behavioral1
Sample
16f2685876894d414af45e3a18be8f25.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16f2685876894d414af45e3a18be8f25.exe
Resource
win10v2004-20231222-en
General
-
Target
16f2685876894d414af45e3a18be8f25
-
Size
47KB
-
MD5
16f2685876894d414af45e3a18be8f25
-
SHA1
90a83d5625739e44ec893667b4371f46ee57d044
-
SHA256
6ef5c65f3d9a04185bf929dc401a9889d6f7a843ea1b66e61ec428cddec3ffa4
-
SHA512
45f94b3bae55773dbc2188dd445277707a48461bc4b354e16a00b3c89975d04c3ed0b349da1ef4f26c48ef7ffdb8e5f0e68638d6ab44a14b13f9c178f8eacbf4
-
SSDEEP
768:eTppNkZ9peXEJKv7dvAuoT8ynVfTsOZT95ak5TscoLwmd+pRpM:ePN29peXDv77oTXVTR5h5TscoLwmu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16f2685876894d414af45e3a18be8f25
Files
-
16f2685876894d414af45e3a18be8f25.exe windows:4 windows x86 arch:x86
78d55c2d22d4dd6fa511d6fad2745a0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
FindAtomA
DeleteAtom
SetLastError
ExitThread
ReadConsoleA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 127KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ