Static task
static1
Behavioral task
behavioral1
Sample
V0.3EnglishVersion/BLEComm.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
V0.3EnglishVersion/BLEComm.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
V0.3EnglishVersion/windows.dll
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
V0.3EnglishVersion/windows.dll
Resource
win10v2004-20231023-en
General
-
Target
bd0220d2c6e833d4bb096b41cbc0ec04e6ec90acc7825a39f987399f2199a480
-
Size
1.2MB
-
MD5
de4c791e6170cdb5525998ceb7bbcf28
-
SHA1
369ec50fc75f738decfe9e28e5cccfdbc4d09d23
-
SHA256
bd0220d2c6e833d4bb096b41cbc0ec04e6ec90acc7825a39f987399f2199a480
-
SHA512
0a5f69b422d7dc63938b957fb5532678d372320304f595a5d46fe7b4cb1673884fab8b1be98239d0d831f1532bedc976d7577f6e5ca296fce9b5f243b7c02fbd
-
SSDEEP
24576:VLFMDlpWVKghyYuaqN/ku96t5e1UJVhNT7NXTbW:4mKghfqN/kvTOiV/NO
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/V0.3EnglishVersion/BLEComm.exe unpack001/V0.3EnglishVersion/windows.winmd
Files
-
bd0220d2c6e833d4bb096b41cbc0ec04e6ec90acc7825a39f987399f2199a480.rar
-
V0.3EnglishVersion/BLEComm.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
V0.3EnglishVersion/BLEComm.exe.config.xml
-
V0.3EnglishVersion/BLEComm.pdb
-
V0.3EnglishVersion/control_cb_display_callbackData.xml.xml
-
V0.3EnglishVersion/control_chb_ShowHidden.xml.xml
-
V0.3EnglishVersion/control_chb_ShowUnconnectableDevice.xml.xml
-
V0.3EnglishVersion/control_cmb_characteristic.xml.xml
-
V0.3EnglishVersion/control_cmb_service.xml.xml
-
V0.3EnglishVersion/control_rad_dec.xml.xml
-
V0.3EnglishVersion/control_rad_hex.xml.xml
-
V0.3EnglishVersion/control_rad_utf8.xml.xml
-
V0.3EnglishVersion/control_rad_writeDec.xml.xml
-
V0.3EnglishVersion/control_rad_writeHex.xml.xml
-
V0.3EnglishVersion/control_rad_writeUTF8.xml.xml
-
V0.3EnglishVersion/control_textBox1.xml.xml
-
V0.3EnglishVersion/control_textBox2.xml.xml
-
V0.3EnglishVersion/control_textBox3.xml.xml
-
V0.3EnglishVersion/control_textBox4.xml.xml
-
V0.3EnglishVersion/control_txt_DecResult.xml.xml
-
V0.3EnglishVersion/control_txt_HexResult.xml.xml
-
V0.3EnglishVersion/control_txt_UTF8Result.xml.xml
-
V0.3EnglishVersion/control_txt_callback_characteristic.xml.xml
-
V0.3EnglishVersion/control_txt_callback_service.xml.xml
-
V0.3EnglishVersion/control_txt_device.xml.xml
-
V0.3EnglishVersion/control_txt_deviceID.xml.xml
-
V0.3EnglishVersion/control_txt_devicename.xml.xml
-
V0.3EnglishVersion/control_txt_rssi.xml.xml
-
V0.3EnglishVersion/control_txt_write.xml.xml
-
V0.3EnglishVersion/windows.winmd.dll windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ