Static task
static1
Behavioral task
behavioral1
Sample
bf6dd6f1789c0aca36ad6de7b6017ff88cdc4d3325a8b98503b965f9b41cf27e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf6dd6f1789c0aca36ad6de7b6017ff88cdc4d3325a8b98503b965f9b41cf27e.exe
Resource
win10v2004-20240226-en
General
-
Target
bf6dd6f1789c0aca36ad6de7b6017ff88cdc4d3325a8b98503b965f9b41cf27e
-
Size
196KB
-
MD5
b02ad81b9b22a5d4af80073755c0c25f
-
SHA1
271cf94d1ba937087992fe1be44a9c07fbb3141c
-
SHA256
bf6dd6f1789c0aca36ad6de7b6017ff88cdc4d3325a8b98503b965f9b41cf27e
-
SHA512
71daaaad30da147f31fd8f8c9d9d42beb54b612535ed40d2d8172c44257a0bd8466c31ed09d59315d0158d1cfc4961a6ea75a792fb1b0c8a41a01dd4bad3e500
-
SSDEEP
6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOC:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf6dd6f1789c0aca36ad6de7b6017ff88cdc4d3325a8b98503b965f9b41cf27e
Files
-
bf6dd6f1789c0aca36ad6de7b6017ff88cdc4d3325a8b98503b965f9b41cf27e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE