Static task
static1
Behavioral task
behavioral1
Sample
bf5622f39551a795bc6d5e1ca61739f7f263c480d016779a4fb6d0c0d309010f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bf5622f39551a795bc6d5e1ca61739f7f263c480d016779a4fb6d0c0d309010f.exe
Resource
win10v2004-20230220-en
General
-
Target
bf5622f39551a795bc6d5e1ca61739f7f263c480d016779a4fb6d0c0d309010f
-
Size
937KB
-
MD5
b3b1d68084e634995183518211c34b1d
-
SHA1
5bc599c5003b5106a60077099a8a6f03c93f8d12
-
SHA256
bf5622f39551a795bc6d5e1ca61739f7f263c480d016779a4fb6d0c0d309010f
-
SHA512
365b4ea4c44f4609bb443f7f7724f761a9ed93d55d524793af4c3948c28ba411dc4c8a2c8300df56f0410effd214e92845d589d7096b42328cb9b88324edc594
-
SSDEEP
12288:bj6/NWK7qO1/L/++QChI8VVOS5IoRuP4RDPR5ohYsNXA4QHDMppOopMpFiPPqjb:b+N7hLhrOS5LRw4RyNNMliHqjb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf5622f39551a795bc6d5e1ca61739f7f263c480d016779a4fb6d0c0d309010f
Files
-
bf5622f39551a795bc6d5e1ca61739f7f263c480d016779a4fb6d0c0d309010f.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 650KB - Virtual size: 42.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE