Static task
static1
Behavioral task
behavioral1
Sample
16a60b1091c521261f9fc3712baec729bebb08ca82564843bcb96db35841ad0b.exe
Resource
win7-20240508-en
General
-
Target
16a60b1091c521261f9fc3712baec729bebb08ca82564843bcb96db35841ad0b.exe
-
Size
1.5MB
-
MD5
98b925951c204782c9ddfeca3570a11d
-
SHA1
618de81a116d3dc897a61fad0ac871978f6b587f
-
SHA256
16a60b1091c521261f9fc3712baec729bebb08ca82564843bcb96db35841ad0b
-
SHA512
517e6907ca29ec6112521410851d6c52833ef9912c414b742b8d13c60c9013ddb61b409d380c8aa0c21140d0e4806132348b329b7ef18595ca69f37f154b3b07
-
SSDEEP
24576:JLnvOkez722EygpXQWooooooooooooooooooooooooooooooooooooooooooooA:JbJ/0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 16a60b1091c521261f9fc3712baec729bebb08ca82564843bcb96db35841ad0b.exe
Files
-
16a60b1091c521261f9fc3712baec729bebb08ca82564843bcb96db35841ad0b.exe.exe .ps1 windows:4 windows x64 arch:x64 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 305.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ