Static task
static1
Behavioral task
behavioral1
Sample
bdbb7f7a5f144aa6193351b0e3fde245.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdbb7f7a5f144aa6193351b0e3fde245.exe
Resource
win10v2004-20240226-en
General
-
Target
bdbb7f7a5f144aa6193351b0e3fde245
-
Size
312KB
-
MD5
bdbb7f7a5f144aa6193351b0e3fde245
-
SHA1
80c5be47989d0c95c4e36cb39b1e33339190fa19
-
SHA256
5ac50c7a459aae0e562bef43c89f4185739e6177267ee88ac6b5cd30090f8ac3
-
SHA512
3901ea9ce3bd7c907e6cadfbcc395cf958795e9daa291ac934b2eb71343b7c36c24cd76ea3549a393109c765839dfa21c990ced18f659655dbff0dee589801cb
-
SSDEEP
6144:pdKv+3de4hhZzteuiYSOz/0R8Fei9K9PeidrDBTwSUaclYOyalB:HKGowZterOj0R8FR9WdrDBcxaclYu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdbb7f7a5f144aa6193351b0e3fde245
Files
-
bdbb7f7a5f144aa6193351b0e3fde245.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE