Static task
static1
Behavioral task
behavioral1
Sample
REV. PI BLM006.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
REV. PI BLM006.exe
Resource
win10v2004-20230703-en
General
-
Target
REV. PI BLM006.exe
-
Size
653KB
-
MD5
f1e7446f4f5d829c256eedf79b9c69b4
-
SHA1
c16f82d656b043d5a451b5ec9cd3510166a2dfdf
-
SHA256
67597ef80dae09206d734a28cd5f67bb236050a49916d46d8c19be0c2d2b9b5b
-
SHA512
d16f30ef045dab897554c77f6f492db96831b8f5dd39d69148e59810bbb688a6ba974427b417c3409e8966e2474664f916a9292d9117a20c4b5a2a871611c32b
-
SSDEEP
12288:jN11Ny1BhhfXjsOVUmlBkPRdxE7yHHjdYZG2mprPR:ehhLszmlBkP3WiBYtmpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource REV. PI BLM006.exe
Files
-
REV. PI BLM006.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 645KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ