Static task
static1
Behavioral task
behavioral1
Sample
bf220ac48356d5621ee3f4d66a5f2f05c912434179c78eb75f0a92486985e0e9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bf220ac48356d5621ee3f4d66a5f2f05c912434179c78eb75f0a92486985e0e9.exe
Resource
win10v2004-20230915-en
General
-
Target
bf220ac48356d5621ee3f4d66a5f2f05c912434179c78eb75f0a92486985e0e9
-
Size
1.3MB
-
MD5
46d29f3bba8288c06a6fcb862731eb79
-
SHA1
ef21ba68629a24d550d2a5d5abcd90746f2320cb
-
SHA256
bf220ac48356d5621ee3f4d66a5f2f05c912434179c78eb75f0a92486985e0e9
-
SHA512
79413beb97018660f54f8178f97946527d44ab5043308543f72117e31431f359b0186c47a1e28cfef4127df128bbdd98ec3fd72a000a922ac51b8b09b75819ff
-
SSDEEP
24576:pBG1xlsEs8fSgzB/lhTAG8JW3YxHbobHxvmrls7s8fSgz:zGrnL/3UG0zobRvagL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf220ac48356d5621ee3f4d66a5f2f05c912434179c78eb75f0a92486985e0e9
Files
-
bf220ac48356d5621ee3f4d66a5f2f05c912434179c78eb75f0a92486985e0e9.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 866KB - Virtual size: 866KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 423KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ