Static task
static1
Behavioral task
behavioral1
Sample
BobCat Alpha v0.4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
BobCat Alpha v0.4.exe
Resource
win10v2004-20231215-en
General
-
Target
143ee1907cbb935ebf8b0abdb6461edc
-
Size
2.0MB
-
MD5
143ee1907cbb935ebf8b0abdb6461edc
-
SHA1
a6cd3b7626c0353bfb13957d6c8c31c132b54a37
-
SHA256
9ecd54c6662cfe479083a918adc85c00c133bd69a976c40b4fed6fb63454bf5c
-
SHA512
2c85e862f4e6592914dadbc3f32fc60903d10b6eec33b62a1ef5f8c79c102f792813b0fc1007d8b4dcd4c971236c4867889d7ffef3ccbcddd269d1d41f5824fc
-
SSDEEP
49152:4v89pzxmO6RQ2/glCkp3wm4G3LYKyYQkMSAAxA2rYmLpZFSXY:v9pzQO6RVglCkp3wPG3OkMSTxA28SZco
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BobCat Alpha v0.4.exe
Files
-
143ee1907cbb935ebf8b0abdb6461edc.zip
-
BobCat Alpha v0.4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ