Static task
static1
Behavioral task
behavioral1
Sample
bf1f6c848ab3966e464a1f04f1a841f6b971c36ba8cc2b7a86bd5182f089c13e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf1f6c848ab3966e464a1f04f1a841f6b971c36ba8cc2b7a86bd5182f089c13e.exe
Resource
win10v2004-20240419-en
General
-
Target
bf1f6c848ab3966e464a1f04f1a841f6b971c36ba8cc2b7a86bd5182f089c13e
-
Size
14KB
-
MD5
17c8163eb2a48431302f81d36edaf825
-
SHA1
28653aa272aecf5995cb7fad6984f95c8b54142c
-
SHA256
bf1f6c848ab3966e464a1f04f1a841f6b971c36ba8cc2b7a86bd5182f089c13e
-
SHA512
638aff7aa9e70002f4e833bac4ff70f8e0e49824cd1c4cecb2c4085e8bb6b8d758c68f160cea03f79a7c07304c030e8c90761e455a43c93c0b068aeac746f612
-
SSDEEP
384:LIKYa4F5W22J22J22J22J22sqZ2EoDE045Hcnnn:0xdF5W2M2M2M2M2mZ29A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf1f6c848ab3966e464a1f04f1a841f6b971c36ba8cc2b7a86bd5182f089c13e
Files
-
bf1f6c848ab3966e464a1f04f1a841f6b971c36ba8cc2b7a86bd5182f089c13e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ