Static task
static1
Behavioral task
behavioral1
Sample
bd0e45e4222d4a0159ae1347f9e6683c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bd0e45e4222d4a0159ae1347f9e6683c.exe
Resource
win10v2004-20231020-en
General
-
Target
bd0e45e4222d4a0159ae1347f9e6683c.exe
-
Size
3.9MB
-
MD5
bd0e45e4222d4a0159ae1347f9e6683c
-
SHA1
4816fc4e5cc109d5108ba45c55b735d9e934cd54
-
SHA256
4e925845732ac9682d1c35e5a8b2b495ebae048759eae8546974c74ceb661656
-
SHA512
e5584fb9206c5d37632b5e4b69f26b6e87806fc2abfe5ea9ce15dceba1b06e3725f4aed29b5ec799ca88031172658556625f93b1426f70ff3c2e0d6f356c0777
-
SSDEEP
98304:pHrMX3ZbN6mocwdMpXYI6A2XwY0o7r5QBa2lAo3WTsKVndJ:1MnZZPocwGpoRRXwY9rb2moBKVdJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd0e45e4222d4a0159ae1347f9e6683c.exe
Files
-
bd0e45e4222d4a0159ae1347f9e6683c.exe.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 5.5MB - Virtual size: 14.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE