Static task
static1
Behavioral task
behavioral1
Sample
bdcab855fde02512a612915c934cbca8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdcab855fde02512a612915c934cbca8.exe
Resource
win10v2004-20240226-en
General
-
Target
bdcab855fde02512a612915c934cbca8
-
Size
950KB
-
MD5
bdcab855fde02512a612915c934cbca8
-
SHA1
a0a46e6f990c54743f91435665395df25187d2bf
-
SHA256
f7d94f4150f854a11f2c4c15527618eca9591308342a6d6ac1e72809e093b4af
-
SHA512
657720534bc46f1ca8be91eb0a36e332ef7e5a2763484d75de35f5051ff9fdfd9477029bd5309b777dbf471e373e9b655a9ae88b273a35cd9ad5c7db8ddd6110
-
SSDEEP
12288:oKXys1c0EZktF3Z4mxxSl7K9k0OVCt3DIi0S80hrRZaqWR40rHeluaL0dUiuRm2F:ocysoZUQmXSl7A9NJvhjyR4kKJRi0+4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdcab855fde02512a612915c934cbca8
Files
-
bdcab855fde02512a612915c934cbca8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE