Static task
static1
Behavioral task
behavioral1
Sample
f16045048616703dd9e605e78713fcee78ba9addc5982490c6fc55e6bf0b1155.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f16045048616703dd9e605e78713fcee78ba9addc5982490c6fc55e6bf0b1155.exe
Resource
win10v2004-20240226-en
General
-
Target
f16045048616703dd9e605e78713fcee78ba9addc5982490c6fc55e6bf0b1155
-
Size
61KB
-
MD5
45f4f304ffcc82b4231123a72633ada0
-
SHA1
627b1d195ec45c20b53108cbffd902d595e2b57a
-
SHA256
f16045048616703dd9e605e78713fcee78ba9addc5982490c6fc55e6bf0b1155
-
SHA512
944a5a2781989fa4d7a73b36a82c37ed42d7abef62eefb827462801c6ffe9c703f00b5ce4ad09300397ced80743bc00d9b6ad8e4805e08445fe612e1b56c7bd8
-
SSDEEP
768:NgO3DJEeScHCcu0C0gXrm5Agco0oKIS0:FH9coo8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f16045048616703dd9e605e78713fcee78ba9addc5982490c6fc55e6bf0b1155
Files
-
f16045048616703dd9e605e78713fcee78ba9addc5982490c6fc55e6bf0b1155.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE