Static task
static1
Behavioral task
behavioral1
Sample
bbf9ac6ff870b3af20014348656eee1d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bbf9ac6ff870b3af20014348656eee1d.exe
Resource
win10v2004-20240226-en
General
-
Target
bbf9ac6ff870b3af20014348656eee1d
-
Size
214KB
-
MD5
bbf9ac6ff870b3af20014348656eee1d
-
SHA1
08e93984901cd438e7dc0c10eba8bfc4690413fa
-
SHA256
a6b713bf9618f526917a71f605d5343b646ff059b8d6754b0939dfafc3d6bf42
-
SHA512
6ccfdf003cb447619b9f36fe003a7858162ec1987e879cf3410cd75e7832ce3f345454499f2f2b6537b70d3a781f81adcbd4e57886c982da7449b117c250e44c
-
SSDEEP
6144:PaSRWpbVttoCnm/m1ZGmgIj6VQ2pWZ6BtkA:twpbmgGmxGq2pG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbf9ac6ff870b3af20014348656eee1d
Files
-
bbf9ac6ff870b3af20014348656eee1d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE