Static task
static1
Behavioral task
behavioral1
Sample
bd03a4c2716c72f268db4883900679c1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd03a4c2716c72f268db4883900679c1.exe
Resource
win10v2004-20240226-en
General
-
Target
bd03a4c2716c72f268db4883900679c1
-
Size
59KB
-
MD5
bd03a4c2716c72f268db4883900679c1
-
SHA1
05a0fad39b0997f6c401abba613a0a7934e16edc
-
SHA256
77fade49fd9e5c23b2067ccdb3e4f609c1e4e53b45a59c53f1321303bc898e16
-
SHA512
34d61481e2e4b4caee369d7fe02749a411beb0377850dee7dae9219ce3f715ac54c98683251bf15efbee0bcfbb5ad6e297de63c4ac98d73ea3a531f773bbca55
-
SSDEEP
1536:3H7b6yehmWZuRiMnHtdpx9ycS2USfA4j:3itmW8nHtRHUwz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd03a4c2716c72f268db4883900679c1
Files
-
bd03a4c2716c72f268db4883900679c1.exe windows:37965 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
abrizzyj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
azaybayz Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jiajizbq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ajqrzqyj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ