Static task
static1
Behavioral task
behavioral1
Sample
168c49459ccdbaee2df61942a898a70572baaeeddc1d71ed5a62b68c435f4290.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
168c49459ccdbaee2df61942a898a70572baaeeddc1d71ed5a62b68c435f4290.exe
Resource
win10v2004-20231215-en
General
-
Target
168c49459ccdbaee2df61942a898a70572baaeeddc1d71ed5a62b68c435f4290
-
Size
14KB
-
MD5
07a5f8e5bd27dd74ee7ee6a92b839fff
-
SHA1
8aad525d864c1f030efd2ada841f6965d73ac11b
-
SHA256
168c49459ccdbaee2df61942a898a70572baaeeddc1d71ed5a62b68c435f4290
-
SHA512
792eb561dfa779f5283d9450dc4bc0b91775c9d2c2103f561b742288a2c25dab1372e69334db717e87e406e6e0edabd55e1cb6cd72f9009521bed77d1f38e938
-
SSDEEP
384:I5qaXeMXBZr4dEBTTTxRBRBRLS2uRBKjZDE045HMOOOO:uYMXB146TTTxRBRBRLSTE5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 168c49459ccdbaee2df61942a898a70572baaeeddc1d71ed5a62b68c435f4290
Files
-
168c49459ccdbaee2df61942a898a70572baaeeddc1d71ed5a62b68c435f4290.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ