Static task
static1
Behavioral task
behavioral1
Sample
bfbf3bbc9d4c5870d8a3a88b7aae07ed1707dc00eb5d19678c914b0bb228b9c2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bfbf3bbc9d4c5870d8a3a88b7aae07ed1707dc00eb5d19678c914b0bb228b9c2.exe
Resource
win10v2004-20230915-en
General
-
Target
bfbf3bbc9d4c5870d8a3a88b7aae07ed1707dc00eb5d19678c914b0bb228b9c2
-
Size
95KB
-
MD5
b257601dd80c2df518c8ceb1cf3343bb
-
SHA1
0f76af1cf5479582fde7d2df2acb2320698cc9b1
-
SHA256
bfbf3bbc9d4c5870d8a3a88b7aae07ed1707dc00eb5d19678c914b0bb228b9c2
-
SHA512
73fdee33c2d690bb286a2e55f959b034dbbcf8e6e35e4e5fbcc3e009bb80086f53b398c8e85fa28c2cfddeccd9eb5e33b5eb4a912dc253b56e57f671fc724e75
-
SSDEEP
384:I/1qjjQqPQ9i2Fvak8d06+KaSjJ95maHWI9EkYVMFV+cSkdoR8lGppgfkhYLHaHE:IsuCh+St95tbGI+jkmalGosOs8ko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfbf3bbc9d4c5870d8a3a88b7aae07ed1707dc00eb5d19678c914b0bb228b9c2
Files
-
bfbf3bbc9d4c5870d8a3a88b7aae07ed1707dc00eb5d19678c914b0bb228b9c2.exe windows x86
c18145a922f3f10e684c101de10f9da2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetModuleHandleW
GetOEMCP
WideCharToMultiByte
HeapAlloc
GetComputerNameW
ResolveDelayLoadedAPI
WriteConsoleW
DelayLoadFailureHook
HeapFree
WriteFile
ucrtbase
wcsncmp
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
__stdio_common_vswprintf
__p___wargv
__p___argc
_set_app_type
exit
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 4KB - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 4KB - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/41 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/67 Size: 4KB - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 4KB - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/91 Size: 4KB - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 4KB - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ