Static task
static1
Behavioral task
behavioral1
Sample
bc_memories_from_the_mcp.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
bc_memories_from_the_mcp.exe
Resource
win10v2004-20230621-en
General
-
Target
bc_memories_from_the_mcp.exe
-
Size
63KB
-
MD5
eef08365ee3d38dcf90a93c1a0817e64
-
SHA1
32a92c1beef6af07069924387a8bd069572eb83f
-
SHA256
484051fcf1d7f8de7084c7419cf49f65b85ab16642093d5c4249002e9e31a00c
-
SHA512
748479cf7d575a4b14f08a113989ffc79f14bdf49c453be04ef4bdeaaec347590d0661e08dc486329c1ec9119d4c6ffe3ee51430efe90283d1f89eada7d20304
-
SSDEEP
1536:h5AC/ccp6XY6lvRid881+WD9ZPWHr+Nbtd6:h5AC/Hp6XYnDS+Btd6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc_memories_from_the_mcp.exe
Files
-
bc_memories_from_the_mcp.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 1.4MB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA