Static task
static1
Behavioral task
behavioral1
Sample
16e64e3fe74acdd21881f472ad673b5b198fab38bd3a0803d053165eba09a9f3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16e64e3fe74acdd21881f472ad673b5b198fab38bd3a0803d053165eba09a9f3.exe
Resource
win10v2004-20240426-en
General
-
Target
16e64e3fe74acdd21881f472ad673b5b198fab38bd3a0803d053165eba09a9f3.exe
-
Size
105KB
-
MD5
a46a3492163daa453ec4c3c83cc02fb0
-
SHA1
00849b9826acf0c46e987e829a6c1cb2ddbeb5c0
-
SHA256
16e64e3fe74acdd21881f472ad673b5b198fab38bd3a0803d053165eba09a9f3
-
SHA512
0c55ad89cca2f1eccf46e2674e9797737ac59b904b5a7e6a2c072d8cea028491228e72e4f9d1e9483a99dcadb1052aadcae6cc3e9690d8a6daf1039ed0163ecb
-
SSDEEP
1536:T3NkYJTrgdiPluOcN6IBV0quFxJHWe2zm4uz5dh3Hkq4/T6dcE1+gagh:T39ttcQITSHWef4u136Ecgagh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16e64e3fe74acdd21881f472ad673b5b198fab38bd3a0803d053165eba09a9f3.exe
Files
-
16e64e3fe74acdd21881f472ad673b5b198fab38bd3a0803d053165eba09a9f3.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ