Static task
static1
Behavioral task
behavioral1
Sample
bf7413daefe07b8a840572da969243daaacc97c33b5ab6caf58adebd24c768e8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bf7413daefe07b8a840572da969243daaacc97c33b5ab6caf58adebd24c768e8.exe
Resource
win10v2004-20230220-en
General
-
Target
bf7413daefe07b8a840572da969243daaacc97c33b5ab6caf58adebd24c768e8
-
Size
4.4MB
-
MD5
6c48e09456b4b2af15a1f3c8cfb5d296
-
SHA1
d23860aea75b42345eb452dfc2e1702a8e97297e
-
SHA256
bf7413daefe07b8a840572da969243daaacc97c33b5ab6caf58adebd24c768e8
-
SHA512
ee13b03fafd1bb9864b27d606543e294dc8ad57165f5a4d48e07c38be995c9012db98d68064f759234af4a2862f4fcd2b51a8f1173e4e094ac3aa5fd87ff26e8
-
SSDEEP
98304:pfVzwchWWWFrwoqjrFgKBp7tVtNNoxad0tPLU+:pYrujraKBp7PtG00tPL3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf7413daefe07b8a840572da969243daaacc97c33b5ab6caf58adebd24c768e8
Files
-
bf7413daefe07b8a840572da969243daaacc97c33b5ab6caf58adebd24c768e8.exe windows x86
418b1f8a3d22f784fa456e25e66b7e81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm50
__vbaVarSub
Sections
pec1 Size: 95KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE