Static task
static1
Behavioral task
behavioral1
Sample
bd1e015e02d2eaacd0e32a3ca9c24a128a4a47ec41d550f3c46536190ba0d650.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd1e015e02d2eaacd0e32a3ca9c24a128a4a47ec41d550f3c46536190ba0d650.exe
Resource
win10v2004-20240508-en
General
-
Target
bd1e015e02d2eaacd0e32a3ca9c24a128a4a47ec41d550f3c46536190ba0d650
-
Size
160KB
-
MD5
8bf6454a56462e93184368d36a4a41de
-
SHA1
fde3324526334c388fed4a1d6e2f6955047d37db
-
SHA256
bd1e015e02d2eaacd0e32a3ca9c24a128a4a47ec41d550f3c46536190ba0d650
-
SHA512
71f209925b50467373fe2373c87e5f203b830ffd9ce9faf6fdcaaa589b00f525557f383fe2ccbbcbce4ba30d91ee2b4438b739eaf20093cea3098966c94a4980
-
SSDEEP
3072:wExnREGFSAyceFw0v0wnJcefSXQHPTTAkvB5DdcgFM9MEl7lFH3mrlKC:wEZF3G3tnJfKXqPTX7D7FM6234lKC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd1e015e02d2eaacd0e32a3ca9c24a128a4a47ec41d550f3c46536190ba0d650
Files
-
bd1e015e02d2eaacd0e32a3ca9c24a128a4a47ec41d550f3c46536190ba0d650.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ