Static task
static1
Behavioral task
behavioral1
Sample
bdb27251b6d837b58a22d2f616c95b46.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdb27251b6d837b58a22d2f616c95b46.exe
Resource
win10v2004-20240226-en
General
-
Target
bdb27251b6d837b58a22d2f616c95b46
-
Size
23KB
-
MD5
bdb27251b6d837b58a22d2f616c95b46
-
SHA1
7fd544fa58685faf4a2a6b72a8d36115fce55900
-
SHA256
21d8546a8b076913954978e7b45544683a203dfa9792326315b6c00946f2a543
-
SHA512
36f74e403eba265cbc4c70562d06e4b39bca89a97ca8abc7bf20b629d8fe88e700c88476ed463e57f03ef80a0bfba9b494eecaa81d1df47c9702f38245e2b629
-
SSDEEP
384:4/7fr5wsgBjzjKPLAGnvztPOdAdYfPenyDVMenIvWzh06VGJOvm29ce:ei/VjKzAGdON2nQueIs06hC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdb27251b6d837b58a22d2f616c95b46
Files
-
bdb27251b6d837b58a22d2f616c95b46.exe windows:4 windows x86 arch:x86
24518dfe2b6e75fc7e8f0dbd87a0f3fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GetConsoleMode
IsValidLocale
msvcrt
__dllonexit
wcscpy
strtoul
strtol
malloc
strncat
strchr
__mb_cur_max
wcslen
_ltow
_strtime
fseek
__p__commode
memmove
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE