Static task
static1
Behavioral task
behavioral1
Sample
bf1b99e066966da1d0af54a4bf1e2ec2.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bf1b99e066966da1d0af54a4bf1e2ec2.exe
Resource
win10v2004-20231215-en
General
-
Target
bf1b99e066966da1d0af54a4bf1e2ec2
-
Size
12KB
-
MD5
bf1b99e066966da1d0af54a4bf1e2ec2
-
SHA1
28fc858b34cea5446818c1fa5f20f6ac392b40df
-
SHA256
7bc4e6aaf1b67adaa0d92f112ddee4120b908a0497a014150b89255523a2f6b3
-
SHA512
0a9c77e4e77be974a30dddf13b78d93d4e4f349f1bbff833add302ff2b25b82498f4eb9f3f589c861ac63e18b62dcc100a99cd2beda6dfc855c8892050cd0386
-
SSDEEP
384:rP19CEb2R6RyBhX7UgFW9mceZAiNf+Kwe:rP14EVwggfrEe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf1b99e066966da1d0af54a4bf1e2ec2
Files
-
bf1b99e066966da1d0af54a4bf1e2ec2.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 1023B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE