Static task
static1
Behavioral task
behavioral1
Sample
8652a4a560016b0d50ea991853583a63.zip
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8652a4a560016b0d50ea991853583a63.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
BFBHD-TS.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
BFBHD-TS.exe
Resource
win10v2004-20231215-en
General
-
Target
8652a4a560016b0d50ea991853583a63
-
Size
235KB
-
MD5
8652a4a560016b0d50ea991853583a63
-
SHA1
aebceeeff8a0e4f150007b87a3845e4264b5e166
-
SHA256
fd4b9d1c45e8700872877ecfad7d1a516bbf4088b74b1aa8856c4774b55bbfe1
-
SHA512
c9960354fa47379225f24e31cd3801ec06690c21392b6d9ee930732083c5889b6ee2c24961623a223908f1edff4e06c270976c09f445f8cf8c6015a398ea9e59
-
SSDEEP
6144:MDPs/4iiYL/Zcl/2oaHmocTXhPMtcwwi6NFhd/PsOAa:MPS4iTZcJCHmDTREtcVPsja
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BFBHD-TS.exe
Files
-
8652a4a560016b0d50ea991853583a63.zip .ps1 polyglot
-
BFBHD-TS.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 238KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE