Behavioral task
behavioral1
Sample
a16c6b927e3d696ab81af981c73d03fd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a16c6b927e3d696ab81af981c73d03fd.exe
Resource
win10v2004-20240221-en
General
-
Target
a16c6b927e3d696ab81af981c73d03fd
-
Size
10.2MB
-
MD5
a16c6b927e3d696ab81af981c73d03fd
-
SHA1
80d46737a56896a7fbc18f14ae0dca7d8ddfa306
-
SHA256
53cabde6e60f5598ea4246f0cfbb752bd9feb629adb59837224462d00aaffe5e
-
SHA512
6f6b8020936bab497124528fbc3e49d852671043def29728781f4f738a570423999c79f77457d21715880242d60d5b084107e79e8be799f26f51d6b8a9a171c6
-
SSDEEP
98304:TW1D2ayLvhq6ihn30g2yOEjjs9/g388BkYzZbV30g2yOEjjs9/g3:TW1DyLxihEZUju/h8l4ZUju/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a16c6b927e3d696ab81af981c73d03fd
Files
-
a16c6b927e3d696ab81af981c73d03fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE