Static task
static1
Behavioral task
behavioral1
Sample
bff50c11fdfabf1dea87461e8b174a7d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bff50c11fdfabf1dea87461e8b174a7d.exe
Resource
win10v2004-20231215-en
General
-
Target
bff50c11fdfabf1dea87461e8b174a7d
-
Size
592KB
-
MD5
bff50c11fdfabf1dea87461e8b174a7d
-
SHA1
64d598f0936a7a46de923fd1d6bb92f643f98db8
-
SHA256
7307e1054dec554b7a534bda8dad7a1214a7df64303306d0ef1c5855fb763843
-
SHA512
b6ee939ae73dfaad9ba0608c1768156fbf0cdf71e894d73f06abf6a60954914514f3341c2793d16c6d28e8bc0819f1bd7c332984e98f334a7ffe41dad6af832b
-
SSDEEP
6144:MhYsafa0idunTIPDan9xTy2VTk0xfdI3QPTYiEYKB6eTBh+:MWlfiunTIe9hTk0xlI30TYUHeT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bff50c11fdfabf1dea87461e8b174a7d
Files
-
bff50c11fdfabf1dea87461e8b174a7d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ