Static task
static1
Behavioral task
behavioral1
Sample
bfc80742ac9502fe2a0d3e4f540aef5b7805f0d323d7e1e6e35761904d5da232.exe
Resource
win10-20230220-en
General
-
Target
bfc80742ac9502fe2a0d3e4f540aef5b7805f0d323d7e1e6e35761904d5da232
-
Size
8.7MB
-
MD5
9dc5d44e7055db45d497d1f57f7f2ca9
-
SHA1
943a84709d9f0c75ebcf9a7aedac98a31f38d133
-
SHA256
bfc80742ac9502fe2a0d3e4f540aef5b7805f0d323d7e1e6e35761904d5da232
-
SHA512
d436eb8bab8145cdf03129ef6a27f0ea1250d57be94bf2f9de8f0daa0ca80d7c6a4832213b3d56a1394b50cff67cb276018428178c454d8003874c1f82a8a84d
-
SSDEEP
196608:ai2bD8mexCOJI0a+p3E6oYwREYYC3GJCqZG/x97vCIgC:P2bgmiE+p3E61rCSCNvjFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfc80742ac9502fe2a0d3e4f540aef5b7805f0d323d7e1e6e35761904d5da232
Files
-
bfc80742ac9502fe2a0d3e4f540aef5b7805f0d323d7e1e6e35761904d5da232.exe windows x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 6.7MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uaoendqe Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
djzkikpc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ