Static task
static1
Behavioral task
behavioral1
Sample
bfbab6b9b7055cbc4cd257a2db1bd02354ff0f3b9eab9dc400065be1bc05fb29.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bfbab6b9b7055cbc4cd257a2db1bd02354ff0f3b9eab9dc400065be1bc05fb29.exe
Resource
win10v2004-20240226-en
General
-
Target
bfbab6b9b7055cbc4cd257a2db1bd02354ff0f3b9eab9dc400065be1bc05fb29
-
Size
384KB
-
MD5
d7c50cc21cd5594811a48620e990140d
-
SHA1
4b9e23e2300c3e7bb67b21f3d1a850ca66e99142
-
SHA256
bfbab6b9b7055cbc4cd257a2db1bd02354ff0f3b9eab9dc400065be1bc05fb29
-
SHA512
f7da2a9ff6e3406856f797b77f874a0834bbf6ccd8ed65471a5e14397ad5fcf1749b5f0424c5522e15b2946ca7eece6fd2b499dfa05504ebaf7f4bc88d4f277c
-
SSDEEP
6144:lArepgfWLUp4dopui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGck7/DiuoHN:lAr5fWLUpDpV6yYPMLnfBJKFbhDwBpV6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfbab6b9b7055cbc4cd257a2db1bd02354ff0f3b9eab9dc400065be1bc05fb29
Files
-
bfbab6b9b7055cbc4cd257a2db1bd02354ff0f3b9eab9dc400065be1bc05fb29.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ