Static task
static1
Behavioral task
behavioral1
Sample
bf8fa4a8e8fb9edc10975ad861da4a17.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf8fa4a8e8fb9edc10975ad861da4a17.exe
Resource
win10v2004-20231215-en
General
-
Target
bf8fa4a8e8fb9edc10975ad861da4a17
-
Size
791KB
-
MD5
bf8fa4a8e8fb9edc10975ad861da4a17
-
SHA1
c7e088b791f11893fb3ea3a433dd9bd6ce5a7230
-
SHA256
56cf4bfe015cebed65a86ca452eec43a5fbbd330bf7a1178059a68b76d331cab
-
SHA512
90db47b76f6de736a3fe22684c0e97941140f93f5cb68064301736f804127b2f8916671a0341beb8ce7260db803c968e1f2da10337d3281007f4cb95a779126c
-
SSDEEP
24576:xsn0QgsF/w/gUsamutf7v60wIgFX2BR/bn5/6SlvSbiMX:xs0QhF/fUJfzDgYB1n5/6SpSuMX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf8fa4a8e8fb9edc10975ad861da4a17
Files
-
bf8fa4a8e8fb9edc10975ad861da4a17.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.������ Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.������ Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.������ Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.520HK Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE