Static task
static1
Behavioral task
behavioral1
Sample
bcd718199097eca8187ab0a8c28ec6a4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcd718199097eca8187ab0a8c28ec6a4.exe
Resource
win10v2004-20240226-en
General
-
Target
bcd718199097eca8187ab0a8c28ec6a4
-
Size
18KB
-
MD5
bcd718199097eca8187ab0a8c28ec6a4
-
SHA1
9a742aff4f40d3f3075727ca1567e33cc1c4c05a
-
SHA256
fe99bb32d93976464d7238827e73fcc77a4ae42031cd5dd703c3a25ea7a4bcf6
-
SHA512
4753b46eb03af15e87a269dfe08fef862398dc5c07fcf8040744568365c746224afaaac7bc04d70ab3d651f0eb9b4b94db8ab0dc00f0b4a625c311543116b0d3
-
SSDEEP
384:MYswLJzwLw/aymO857FWbDVDIoR9RT34r8SGBt4/oUDf:c1WeCRTor
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcd718199097eca8187ab0a8c28ec6a4
Files
-
bcd718199097eca8187ab0a8c28ec6a4.exe windows:4 windows x86 arch:x86
e8806b863f8253793417cded1d196eaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
SelectObject
SetBkMode
SetTextColor
kernel32
ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
WinExec
msvcrt
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
atexit
exit
fclose
fgetc
fopen
fprintf
fputc
fread
free
fseek
ftell
__p__environ
malloc
remove
rewind
signal
strcmp
strlen
__set_app_type
user32
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
EndPaint
FindWindowA
GetClientRect
GetDlgItem
GetMessageA
GetWindowTextA
IsDialogMessageA
IsIconic
KillTimer
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassA
SendMessageA
SetActiveWindow
SetFocus
SetForegroundWindow
SetTimer
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow
CreateDialogParamA
BeginPaint
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 80B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ