Static task
static1
Behavioral task
behavioral1
Sample
bfa23fdeb598a4d6c60976348a710dbcbd24c577731aba8892ff89b969af492e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bfa23fdeb598a4d6c60976348a710dbcbd24c577731aba8892ff89b969af492e.exe
Resource
win10v2004-20230220-en
General
-
Target
bfa23fdeb598a4d6c60976348a710dbcbd24c577731aba8892ff89b969af492e
-
Size
747KB
-
MD5
9431755e31d382cbaa5d0c4529f8b80e
-
SHA1
493ca8a550f02af9a11909ec0df20ebfdfbbe1bb
-
SHA256
bfa23fdeb598a4d6c60976348a710dbcbd24c577731aba8892ff89b969af492e
-
SHA512
7dc52bce34c3473f30c7c91ef9dc6575c079a05b84c771d1f106638907fb5abfc5f33571e88ec59fc0c6933efbee6a01d83d8c4b96d690ad7523cf29db0676be
-
SSDEEP
12288:MLKMyCiOn508Azo3Hw5wh4GvK27ARZwe7ghLTWSUFl5MAqfoUpMHLT9Pfz+5/QNf:M+/nw5Molh4z27AR+WSulKlfotHX5zHN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa23fdeb598a4d6c60976348a710dbcbd24c577731aba8892ff89b969af492e
Files
-
bfa23fdeb598a4d6c60976348a710dbcbd24c577731aba8892ff89b969af492e.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 737KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE