Static task
static1
Behavioral task
behavioral1
Sample
16fce8d68b407f6afdcd1256bd455f59abe7aecf3c00f3f3c0276929c07ed644.exe
Resource
win7-20240729-en
General
-
Target
16fce8d68b407f6afdcd1256bd455f59abe7aecf3c00f3f3c0276929c07ed644
-
Size
1.7MB
-
MD5
d106a06a2d284e86d1bab683d9ab66b6
-
SHA1
eaee0c75a6cf398e6d1d102936f11d7458c098ee
-
SHA256
16fce8d68b407f6afdcd1256bd455f59abe7aecf3c00f3f3c0276929c07ed644
-
SHA512
cbba0dc34f3de2757758455c6a1e99a143491539f2d4492cb87b9a9c27b9d3c93e398f0d24e9abb77c566d4658aeb1284d8b1da3c51e43e6034c5f6622861d25
-
SSDEEP
49152:tFKphZF1SydD6CCd00P9PMmjfj4yAJFQ9fi:tFKpPiydD6CCBMO4yAJ0fi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16fce8d68b407f6afdcd1256bd455f59abe7aecf3c00f3f3c0276929c07ed644
Files
-
16fce8d68b407f6afdcd1256bd455f59abe7aecf3c00f3f3c0276929c07ed644.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 88KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aqljwzcx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gdioirte Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE