Static task
static1
Behavioral task
behavioral1
Sample
16a1c70846fef56b823f94a48fd7915954f5ed5c50cb51a4a6c0272a136efce8N.dll
Resource
win7-20240903-en
General
-
Target
16a1c70846fef56b823f94a48fd7915954f5ed5c50cb51a4a6c0272a136efce8N.exe
-
Size
120KB
-
MD5
68ade536b0eca2d0a08caac58fbacbf0
-
SHA1
0dd94281b0744cb5e7cf88c164e08dee4dc0fa96
-
SHA256
16a1c70846fef56b823f94a48fd7915954f5ed5c50cb51a4a6c0272a136efce8
-
SHA512
c500690c38c887d9a6ab2f050cc7fe560e2cbb627cb7c2954c9dd76cfbe3773ecb74a14385b9bc6c96b2267698e1154f4258e1e599652f26e73e809d912501f5
-
SSDEEP
3072:sxs+VyG0FSMfnY6d/P0h2JCYa3uKF84HJlEu3mN:sxsuF4Hq3xTHJlEu2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16a1c70846fef56b823f94a48fd7915954f5ed5c50cb51a4a6c0272a136efce8N.exe
Files
-
16a1c70846fef56b823f94a48fd7915954f5ed5c50cb51a4a6c0272a136efce8N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ