Static task
static1
Behavioral task
behavioral1
Sample
bc06f849a73d0836a16feb121215f362.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc06f849a73d0836a16feb121215f362.exe
Resource
win10v2004-20231215-en
General
-
Target
bc06f849a73d0836a16feb121215f362
-
Size
464KB
-
MD5
bc06f849a73d0836a16feb121215f362
-
SHA1
39a362defd9402ff45117314972042af45d6a1f8
-
SHA256
b8ef9d4e30eae855bdd21f81620fd5773a0f18855faa89334afe316e41da0716
-
SHA512
3a0992ac6282fe89a64d741fe62c5f68cccc9897759d3529148818b2e448e2e99dee2f0f169a01e8a4e7adcc54d69961c349c910a0c2c43be04c982fde99d0fc
-
SSDEEP
6144:EDkWcDpi78KSrafqV5areuyFwB+XN/O8OCLz2SCV/h1dg1+eAJfjQemZT5GtsRUZ:EDlc87eqqV5e+wBoO+32XWYB5mZQuO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc06f849a73d0836a16feb121215f362
Files
-
bc06f849a73d0836a16feb121215f362.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ