Static task
static1
Behavioral task
behavioral1
Sample
bdf9cd5d55f9e593fe713debd5771a16.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdf9cd5d55f9e593fe713debd5771a16.exe
Resource
win10v2004-20240226-en
General
-
Target
bdf9cd5d55f9e593fe713debd5771a16
-
Size
200KB
-
MD5
bdf9cd5d55f9e593fe713debd5771a16
-
SHA1
36eb2f75fb990a631a5aa4084adab566dc0b4e7f
-
SHA256
5d3eae2807f4da29036be092d4dbcce6237f8027054b11e7424c6ecac06a7385
-
SHA512
c044597e65433242d0eca5decfea8ff19fb83e53b41a10f5dac3ae17ca2d0f7f673e1e88ffa2d76d8572bfd5f0f5e4d1df880cc361dce4e877e9b7a7b268130e
-
SSDEEP
3072:ROHIRO3vW20/egL4+4ygIkS3ZpcewHJK9v5WtZr633ITGBSIGuoJ:RwIRO3vQe7+4ulGeAJ6hW7r6nI7J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf9cd5d55f9e593fe713debd5771a16
Files
-
bdf9cd5d55f9e593fe713debd5771a16.exe windows:4 windows x86 arch:x86
920e009aa8af818b344b6c78c263388d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc71
ord2468
ord764
ord310
ord578
ord784
ord304
ord911
ord313
ord5420
ord1198
ord6118
ord2933
ord299
ord2902
ord876
ord1489
ord297
msvcr71
_onexit
__dllonexit
?terminate@@YAXXZ
__security_error_handler
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
??1type_info@@UAE@XZ
memset
_except_handler3
free
__CxxFrameHandler
srand
time
_controlfp
kernel32
LockResource
CreateFileA
WriteFile
CloseHandle
DeleteFileA
GetWindowsDirectoryA
GetVersionExA
LoadResource
SizeofResource
FindResourceA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSection
GetLastError
advapi32
RegSetValueExA
RegOpenKeyExA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ