Static task
static1
Behavioral task
behavioral1
Sample
cf16f563818bcb684d39fd2185d13f718db128201e7d1c63c07e53217997e35e.exe
Resource
win7-20240221-en
General
-
Target
cf16f563818bcb684d39fd2185d13f718db128201e7d1c63c07e53217997e35e
-
Size
276KB
-
MD5
48e84ec7458a606021b1d0cbda4dcd9b
-
SHA1
157e3fe78848409aeb3a5707a288dde94e0cfbe5
-
SHA256
cf16f563818bcb684d39fd2185d13f718db128201e7d1c63c07e53217997e35e
-
SHA512
43f5e68e4597b593b9eb36d5fff28491fbda5339581bb838c9807009034d74b078b1bb819c43e93212bc8dbca832c19ecfb20767c71ccf7077ff5f30df6c5511
-
SSDEEP
6144:n3C9BRIG0asYFm71m8+GdkB9yMu7Vvemz:n3C9uYA71kSMul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf16f563818bcb684d39fd2185d13f718db128201e7d1c63c07e53217997e35e
Files
-
cf16f563818bcb684d39fd2185d13f718db128201e7d1c63c07e53217997e35e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ