Static task
static1
Behavioral task
behavioral1
Sample
e16c6431d10a115fa77cd67f8ffd68d5496b4aff864b22f85c9db354f0bc435c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e16c6431d10a115fa77cd67f8ffd68d5496b4aff864b22f85c9db354f0bc435c.exe
Resource
win10v2004-20240226-en
General
-
Target
e16c6431d10a115fa77cd67f8ffd68d5496b4aff864b22f85c9db354f0bc435c
-
Size
592KB
-
MD5
7325dd82ea27741f6f504541c99a506c
-
SHA1
a8f7405e0becb91ad972461b7d37098fd0af6257
-
SHA256
e16c6431d10a115fa77cd67f8ffd68d5496b4aff864b22f85c9db354f0bc435c
-
SHA512
1f95cd97ea62901cfcc84edb85dd9234950a1e8bc9f0fe813cd998607cc720015c3552464bae8b3e90567ca430c8090068eaa23e232218c03d81cd389b9639b4
-
SSDEEP
6144:wqDAwl0xPTMiR9JSSxPUKododHVwpnOSa:w+67XR9JSSxvododHVwpOSa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e16c6431d10a115fa77cd67f8ffd68d5496b4aff864b22f85c9db354f0bc435c
Files
-
e16c6431d10a115fa77cd67f8ffd68d5496b4aff864b22f85c9db354f0bc435c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE