Static task
static1
Behavioral task
behavioral1
Sample
bfeb3e5d9c8750b6e56e27f52a2594a8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bfeb3e5d9c8750b6e56e27f52a2594a8.exe
Resource
win10v2004-20230221-en
General
-
Target
bfeb3e5d9c8750b6e56e27f52a2594a8.exe
-
Size
652KB
-
MD5
bfeb3e5d9c8750b6e56e27f52a2594a8
-
SHA1
a4d54db8abc72559234b0b1ff6578eac12c4ff9b
-
SHA256
e82f9cf6d104bb438e455d83f347d68cf95ba7df49c23d057c20312c2d06f30e
-
SHA512
5e979468e902cf2d6ce40fad56c7cdac7df18105dff1f91d31295d13881e05ceef17846b8e04c48929c89976f8617991d65cdef1067094eed78927dd88e90901
-
SSDEEP
12288:6vV+s1bSQT6tjjdB4Weeu51EYUUlsKw+3oB75Vvm/wUmHFrTETP:6tYPun7lsKw+3otu//mHCj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfeb3e5d9c8750b6e56e27f52a2594a8.exe
Files
-
bfeb3e5d9c8750b6e56e27f52a2594a8.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 649KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ