Static task
static1
Behavioral task
behavioral1
Sample
bfc317c17a950486b5c7218fac659f69.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bfc317c17a950486b5c7218fac659f69.exe
Resource
win10v2004-20240226-en
General
-
Target
bfc317c17a950486b5c7218fac659f69
-
Size
281KB
-
MD5
bfc317c17a950486b5c7218fac659f69
-
SHA1
9922644235a4f2e4b0a87edeeb79022a270576a7
-
SHA256
f865a1e4b32297c7ed2ac1df1830556129b400d5328c8183259855dfbaa20d8f
-
SHA512
e4ff04b063e3afc2c66317c636a3d1787e06f8a1b40440a01bba623629a4cc05b97d9daf53c572e0e00e624daee39fc2c4e54f2a3787fd785d2ccdad85230e1f
-
SSDEEP
6144:ZgbtkuuhQ/4lj9nywgCUlR0QnL+DHzJusOBiFTdxyAK7KB:Q+7ywhUlRJexOmJoAK+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfc317c17a950486b5c7218fac659f69
Files
-
bfc317c17a950486b5c7218fac659f69.exe windows:4 windows x86 arch:x86
d2b2ebca9100e132986c5e1a03649c7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
lstrlenA
TlsGetValue
GetStdHandle
GetAtomNameA
GetConsoleCP
VirtualProtect
FindAtomA
GetProfileIntA
GlobalUnlock
GetACP
HeapWalk
GetModuleHandleA
CloseHandle
HeapReAlloc
GetVersion
LoadLibraryA
GetTickCount
CompareFileTime
InterlockedExchange
TlsFree
user32
PaintDesktop
GetWindowTextA
GetKeyboardLayout
GetMenuStringA
GetDlgItem
SetPropA
SubtractRect
GetScrollRange
EqualRect
TranslateMessage
EnableScrollBar
ShowWindow
UpdateWindow
DialogBoxParamA
PostMessageA
CreateCaret
MessageBoxA
ModifyMenuA
CopyRect
SetWindowPos
LoadIconA
InsertMenuA
DestroyMenu
DispatchMessageA
InflateRect
GetMenu
msi
MsiEnumClientsA
MsiGetMode
MsiEnumProductsA
MsiCloseHandle
MsiDoActionA
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ