Static task
static1
Behavioral task
behavioral1
Sample
bf173eff54804f108a66465b708719e2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf173eff54804f108a66465b708719e2.exe
Resource
win10v2004-20240226-en
General
-
Target
bf173eff54804f108a66465b708719e2
-
Size
41KB
-
MD5
bf173eff54804f108a66465b708719e2
-
SHA1
942e3fdd0f7ba8eddb2334181d1d897e62c2c4cd
-
SHA256
d994bfbedb30abf8db07511b9cfe896c19425ac6c582647184cd010ccb2bc759
-
SHA512
aec0b2fd59284682ecacc7990b050bce20905286a152d5e77e9cd751025e5388a4a8fabb87ab7c4db5dc99fa7af14a54051f3ac9e503dca81b195e29e0d1cc65
-
SSDEEP
768:uJ2BsPQNhfzJ5Sp1mfRYeI+sKaReYTxVcXTPA6WxLs5lW4PteYYdHy+gq1u:Q2aIvWpA5JIdNvcXTcaW4VLY5yd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf173eff54804f108a66465b708719e2
Files
-
bf173eff54804f108a66465b708719e2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
:.TFT.:0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
:.TFT.:1 Size: 38KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
:.TFT.:2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE