Static task
static1
Behavioral task
behavioral1
Sample
bcd08b6a419f57825077efb7c72e11cc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcd08b6a419f57825077efb7c72e11cc.exe
Resource
win10v2004-20240226-en
General
-
Target
bcd08b6a419f57825077efb7c72e11cc
-
Size
1000KB
-
MD5
bcd08b6a419f57825077efb7c72e11cc
-
SHA1
1fbe901e836c3d3de8ea12981269aeaa66e23f56
-
SHA256
be5dc3a7ddfe78405722ba3132d2a37f4af628d9807fe58df1b5d60de10baeae
-
SHA512
eb81c7436592dadb2d4fde55ba52e35c07cd2ce0007dfa0bb15b81680f85effb45ae17026961a65d9790c931fe35ca5a339c874061c03d11eab6b2196a211e96
-
SSDEEP
12288:xm7f78CGyTE35+R40p31vyh0qwZsh88E4Aa3ECaBwQ2tb5JLrnylUPqt0gHDS7ed:xmb78VJY283n8tU1B+5vMiqt0gj2ed
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcd08b6a419f57825077efb7c72e11cc
Files
-
bcd08b6a419f57825077efb7c72e11cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ