Static task
static1
Behavioral task
behavioral1
Sample
BSuHKTQogWYegWx.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
BSuHKTQogWYegWx.exe
Resource
win10v2004-20231023-en
General
-
Target
BSuHKTQogWYegWx.exe
-
Size
802KB
-
MD5
e5c00dbf4c84b7b79bea0182d2dd7e6f
-
SHA1
c1b807d74af6551c703299a9ce7756a25e04819d
-
SHA256
6867aea0a81bab2bbdd2f0813185c930ee498c97e99421f3c769dabfad58a573
-
SHA512
a13b9c1711c52ece2662c8c0e66dd792b5d69a18ad1032e2e59af45733fe6db9fb9ad4d83c633ee997bff6dbf4d7e0932901e1bafe3b418526c361392ddc3910
-
SSDEEP
24576:gGKjtD/61g2k7SyB8SYjnaTX4iqeo3uagDHowiUQv:st6rk7Sy6Jn44iqe1DHsh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BSuHKTQogWYegWx.exe
Files
-
BSuHKTQogWYegWx.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 799KB - Virtual size: 799KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ