Static task
static1
Behavioral task
behavioral1
Sample
bdfecdb9795608a9db90d0c13f496b70e62c77eee34a569e6b55c4d0563f6b23.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdfecdb9795608a9db90d0c13f496b70e62c77eee34a569e6b55c4d0563f6b23.exe
Resource
win10v2004-20240508-en
General
-
Target
bdfecdb9795608a9db90d0c13f496b70e62c77eee34a569e6b55c4d0563f6b23
-
Size
161KB
-
MD5
012921d31df64fb1802b6bcf9265663f
-
SHA1
2736051ca06c08d038ba2e8eae3b4f9b96b54284
-
SHA256
bdfecdb9795608a9db90d0c13f496b70e62c77eee34a569e6b55c4d0563f6b23
-
SHA512
4a3e0c07f8a00b89b78b947aa3c94a9a45fd7dfe8a79a68b701f3c11bdc82a76efd86255fee5778b61beca74c003a171083d95dcc058c486b4343601ece8b595
-
SSDEEP
3072:MJOHkBwgOeBR21eBKcFRGknVwtCJXeex7rrIRZK8K8/kvV:MJbTOQBDGknVwtmeetrIyRV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdfecdb9795608a9db90d0c13f496b70e62c77eee34a569e6b55c4d0563f6b23
Files
-
bdfecdb9795608a9db90d0c13f496b70e62c77eee34a569e6b55c4d0563f6b23.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ