Static task
static1
Behavioral task
behavioral1
Sample
bc6cf59f8cbf0333e4d739bc4fac23864c66212e55a8d6d9728b065c56a65277.exe
Resource
win7-20240215-en
General
-
Target
bc6cf59f8cbf0333e4d739bc4fac23864c66212e55a8d6d9728b065c56a65277
-
Size
2.9MB
-
MD5
e65e164664ab397f268b5abd86370a25
-
SHA1
e0256d59c505898ce8eaba11c939643fa3608967
-
SHA256
bc6cf59f8cbf0333e4d739bc4fac23864c66212e55a8d6d9728b065c56a65277
-
SHA512
d31a1e248853b60c18b00879ea0a0033054ad655626074e171e0db19a511e3b0c3c0b06ca6d062577c25f77ea727313f69d1746795bee0f0b451e041474d162a
-
SSDEEP
49152:SJ6EhettSiTR62LBoWlSCyf+yBI+bIw8Twmo6dU1sTtUuZ+:cnO3lefc8b8T/o6diomuZ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc6cf59f8cbf0333e4d739bc4fac23864c66212e55a8d6d9728b065c56a65277
Files
-
bc6cf59f8cbf0333e4d739bc4fac23864c66212e55a8d6d9728b065c56a65277.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dbanwhfo Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jmzevxxr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE