Static task
static1
Behavioral task
behavioral1
Sample
bfba838708b61584b74b01a3fb769247.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bfba838708b61584b74b01a3fb769247.exe
Resource
win10v2004-20240226-en
General
-
Target
bfba838708b61584b74b01a3fb769247
-
Size
109KB
-
MD5
bfba838708b61584b74b01a3fb769247
-
SHA1
8418c1927d4630090d400da14d8fca501ef2a8e4
-
SHA256
df736334e568b7ffd197295ded3a89d9e495918e7e5973a45d24d8d1e7410c85
-
SHA512
d407e4960465e09e603a86bb030296e02bc3fd4ef51aa4cffccf47b84d8e3e8e497684ec01376d5d7531fa0f99525ce4d9389827eb38681646a1500bb0322543
-
SSDEEP
3072:FfXhfDCZLGYDRoxw4phayzQSVv216XBI2QmZ2y46cGfD:FJeZLGJw4zaArXZ2QcGfD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfba838708b61584b74b01a3fb769247
Files
-
bfba838708b61584b74b01a3fb769247.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE