Static task
static1
Behavioral task
behavioral1
Sample
bftest2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bftest2.exe
Resource
win10v2004-20230915-en
General
-
Target
bftest2.exe
-
Size
903KB
-
MD5
20858fa8a2e9918c857206f98398a151
-
SHA1
562a67caff70d05eb264a0e39bed80a36816a036
-
SHA256
e7990b55b6db34aef4c6ef60351fbc3f19c4a451106b33aeaca4b68a674b84d1
-
SHA512
936f4438ae97d707c4110e7d90a92d1fe3a6018cf4039b894e4a2d30e9f3f3d268ea3d6687e97630b28972abcd4ac0343b34da57d0bd42b0d90d5d01311518a8
-
SSDEEP
24576:FSmvJ9Y5G1FOPjWcjL8TxNYqEv0rODHZ/lpWUmJKfplz7GknpD:FSmh9Y56OaccTtsWIZ/GUm0fpB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bftest2.exe
Files
-
bftest2.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 900KB - Virtual size: 899KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ