Static task
static1
Behavioral task
behavioral1
Sample
bc0c85e920ebadb88902daf837a3c520.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc0c85e920ebadb88902daf837a3c520.exe
Resource
win10v2004-20240226-en
General
-
Target
bc0c85e920ebadb88902daf837a3c520
-
Size
663KB
-
MD5
bc0c85e920ebadb88902daf837a3c520
-
SHA1
cc680854e79acdfc741780d0b3d1eb8c75bd33c9
-
SHA256
a22bbc0251968d45cc315ead78b92c97932c503cb3dd6330d1726f280e745222
-
SHA512
b7bbf0029122ea6352296ac4dc12032128cc4caddae273f4331af7a3968161555c48b7ec0eb51cb3493c6c462642fee565f10936d5f2e79067a7d05295a91f5e
-
SSDEEP
12288:EfwkVqtKf66F1b0FitdHNPyN6LEqZ/7zu1Y7uF3Z4mxxemXQxli0s8NBWqV:kdS6FmFeqN63/nYauQmXemXGQ8NI8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc0c85e920ebadb88902daf837a3c520
Files
-
bc0c85e920ebadb88902daf837a3c520.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 346KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE