Static task
static1
Behavioral task
behavioral1
Sample
bf97d78d9561df108f4f192a129ddec3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf97d78d9561df108f4f192a129ddec3.exe
Resource
win10v2004-20240226-en
General
-
Target
bf97d78d9561df108f4f192a129ddec3
-
Size
60KB
-
MD5
bf97d78d9561df108f4f192a129ddec3
-
SHA1
d7f7cc4797871255b1ed9ad9a613c12d57e3bb72
-
SHA256
a7d1d56b274cb1fa356311c94186996ad0822e48b97a0d4f8a630bf903493169
-
SHA512
ab10eb0a137e2e54b3859cb73a30d57fba2060a4e2fedf34197908cc1901d63c0442a0603c5660ef49d57721815bb77f25732e19f9d27c1b6b5691371bb6e60e
-
SSDEEP
768:mFO52oNHTRlv/wGJEKQb9QZ0yw9+JUufLylyG3qXEoWTb4cQHxg:r2o2GJ9/w3nyG3iEoWTb4cQHi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf97d78d9561df108f4f192a129ddec3
Files
-
bf97d78d9561df108f4f192a129ddec3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��:~v Size: 10B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE