Static task
static1
Behavioral task
behavioral1
Sample
bfcaf35f99dae3ed85d0293c7771afc6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bfcaf35f99dae3ed85d0293c7771afc6.exe
Resource
win10v2004-20240226-en
General
-
Target
bfcaf35f99dae3ed85d0293c7771afc6
-
Size
103KB
-
MD5
bfcaf35f99dae3ed85d0293c7771afc6
-
SHA1
d9c873e1bee1603a2ecb89d573fe70f1e792c778
-
SHA256
3ceaa90d86f4f4582b9b38386aa94287cabe340eff62a2145ae7df0bceb3ed69
-
SHA512
7f862d57145520399d5c639713b034e005e81092b2046a332314b2ce0fca8a40db125ccd431afc28b7cb8c2ce4822fd7706d901d62044f81691d1b361c949397
-
SSDEEP
3072:bVI+a+W6f8Vxxk4C+6nZbvu6V5G/kvLq/X3:bVlaAAxK+W5wkvI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfcaf35f99dae3ed85d0293c7771afc6
Files
-
bfcaf35f99dae3ed85d0293c7771afc6.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 102KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE