Static task
static1
Behavioral task
behavioral1
Sample
bf72c5e7b91ec36f1824d38c081633b6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf72c5e7b91ec36f1824d38c081633b6.exe
Resource
win10v2004-20231215-en
General
-
Target
bf72c5e7b91ec36f1824d38c081633b6
-
Size
105KB
-
MD5
bf72c5e7b91ec36f1824d38c081633b6
-
SHA1
0cdec924fa0471f94915238686576cd157deed51
-
SHA256
7acc1bfca9b2caa8aef6e311b5c37d5c39455d82c4bb543ee9f6ad321bf972db
-
SHA512
30e1bc08e7ac5c09c6bd0c267091e3b1cd7b4b1f3175318cafd0341c2dca8997ddaa141c70b66392789d873b8d7e4686e91464f66b39df6aede795b4efb4d47c
-
SSDEEP
3072:AXGlNTLNdwlA7KLYDR2ssvmB0YqCSyZpW9i:dHN/EYFdWmG5yZY4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf72c5e7b91ec36f1824d38c081633b6
Files
-
bf72c5e7b91ec36f1824d38c081633b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 91KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ