Static task
static1
Behavioral task
behavioral1
Sample
bedrocklauncher.exe
Resource
win10v2004-20231215-en
General
-
Target
bedrocklauncher.exe
-
Size
1.2MB
-
MD5
1f41b328e22966ebf8b0a93979f8723e
-
SHA1
55d315287247de9707cf8f24dbc0cdd4efae2916
-
SHA256
8ca4f0ba72f5cb11d4b488a3128382afd563e7a5b925c860f1712c6750244679
-
SHA512
47e46080c9e72d8b2a9e35e29ec19cf07e6c1bbb3f7f6ae57d2371209b2ac0b67add087e235e6b5d922e978f606359f570acb7d9e36bb5cb4cfebe940a3b067e
-
SSDEEP
24576:hRCcHzDtgP5dOASwgNqYZdh4fw+Jwz/S/6Vzc6C:hRt2PzZSVq1w+W7SCV5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bedrocklauncher.exe
Files
-
bedrocklauncher.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ