Static task
static1
Behavioral task
behavioral1
Sample
bcbc6b8da43128e9d24a7e836faf9afe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcbc6b8da43128e9d24a7e836faf9afe.exe
Resource
win10v2004-20240226-en
General
-
Target
bcbc6b8da43128e9d24a7e836faf9afe
-
Size
135KB
-
MD5
bcbc6b8da43128e9d24a7e836faf9afe
-
SHA1
b44b97b89577d8f135860d0f2047324eff7c9d18
-
SHA256
cff5fc4f0c98b614ed995831225a5c89687a1c5cd5bf887f9313cbfdf9fcbe7e
-
SHA512
e3e1a8d481e1dafc3d1b7186364c674b3e2e45ae566213d91df178938977425a276124dbf07a53fc39fcf1a63e77a2bdb423cb51ec6adf3c49b872504a364f4a
-
SSDEEP
1536:sqiZ2jAhpQPkn2s0KjDnG4nbEAZCRyK2M/T51SPyCqHWRRBi9kji1nwuEnGKDRUg:3jGmPk234BBZOjT5M6CIWRO+jwnRYS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcbc6b8da43128e9d24a7e836faf9afe
Files
-
bcbc6b8da43128e9d24a7e836faf9afe.exe windows:4 windows x86 arch:x86
bfe04d7f985ff463889c48b25856bcef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
gdi32
SetTextColor
SetWindowExtEx
GetDeviceCaps
RestoreDC
EndPage
SetBrushOrgEx
LPtoDP
GetPaletteEntries
SetDIBColorTable
ExcludeClipRect
GetDIBColorTable
SelectObject
ScaleViewportExtEx
MaskBlt
OffsetViewportOrgEx
PtVisible
GetDCOrgEx
DeleteDC
SetBkColor
Rectangle
EndDoc
PatBlt
GetTextMetricsA
SelectPalette
GetBrushOrgEx
GetPixel
SetViewportOrgEx
StretchBlt
UnrealizeObject
CreateCompatibleBitmap
SetBkMode
CreatePatternBrush
DeleteObject
LineTo
RectVisible
PlayEnhMetaFile
CreateRectRgn
Chord
BitBlt
DPtoLP
GetEnhMetaFilePaletteEntries
EndPath
MoveToEx
SetStretchBltMode
SelectClipPath
SetColorSpace
SetROP2
SaveDC
SetMapMode
BeginPath
GetCharWidth32A
CreateBitmap
GetStockObject
kernel32
IsDebuggerPresent
GetTickCount
GetCommandLineW
lstrcmpA
GetModuleHandleW
GetOEMCP
GlobalFindAtomW
DeleteFileW
GetLastError
GetProcessHeap
lstrcmpiW
GetUserDefaultLangID
SetLastError
DeleteFileA
GetCurrentThreadId
lstrlenA
GetCommandLineA
GetVersion
lstrcmpiA
GetConsoleOutputCP
MulDiv
GetCurrentThread
GetCurrentProcessId
RemoveDirectoryA
GetCurrentProcess
CopyFileA
lstrlenW
SetCurrentDirectoryA
GetACP
GlobalFindAtomA
GetThreadLocale
GetModuleHandleA
VirtualAlloc
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ