Static task
static1
Behavioral task
behavioral1
Sample
bd1af8b1b9d1c5aad1991de6ff685f4f64763336c7ed60f648660522e1479117.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bd1af8b1b9d1c5aad1991de6ff685f4f64763336c7ed60f648660522e1479117.exe
Resource
win10v2004-20230915-en
General
-
Target
bd1af8b1b9d1c5aad1991de6ff685f4f64763336c7ed60f648660522e1479117
-
Size
81KB
-
MD5
cd37e9d7b8e940bff56443ca8ddea5f0
-
SHA1
bd19c8ae8db2c0ed2dee88b15635991d82218849
-
SHA256
bd1af8b1b9d1c5aad1991de6ff685f4f64763336c7ed60f648660522e1479117
-
SHA512
dac1aa55bdbac47bc4e09a2cde3cec1b7a2f017a55db020f7bbba139913361a768bf7d40ae0db227899b2d42807058e315a5f2fbc8e81c350e678b723e15fad0
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOVm6d6:GhfxHNIreQm+HiOmc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd1af8b1b9d1c5aad1991de6ff685f4f64763336c7ed60f648660522e1479117
Files
-
bd1af8b1b9d1c5aad1991de6ff685f4f64763336c7ed60f648660522e1479117.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE