Static task
static1
Behavioral task
behavioral1
Sample
bdbf3019018c54a2501f3e558dbf2160.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdbf3019018c54a2501f3e558dbf2160.exe
Resource
win10v2004-20240226-en
General
-
Target
bdbf3019018c54a2501f3e558dbf2160
-
Size
479KB
-
MD5
bdbf3019018c54a2501f3e558dbf2160
-
SHA1
7ca2330e5cf3db4e501372022d564e0d81d9a277
-
SHA256
c1852fb4fb770c63c85bd43e9442df522eb9b929d6728b99d7dd3ca3f88557b1
-
SHA512
9c9098c2348e9b182b4b4ef3258cb66641d1c2360c94bfbb820b29a73d1b44e8be58c2a55e1d8a0440e4e1ba8173c451710106ef82ce3f2275ef0eeac329481b
-
SSDEEP
12288:XIVRjDgPLRv7g2SVx/ZG6Gqpwp6gKX3lH9KZuqrR06sjiQbC:XIV1gPLRv7g5PZpHzgKX3laZs2gC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdbf3019018c54a2501f3e558dbf2160
Files
-
bdbf3019018c54a2501f3e558dbf2160.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 444KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ