Static task
static1
Behavioral task
behavioral1
Sample
bd16cbd2d6866544b614db1c8e7f6a2e22c83deb9b9b15d0fa56c34e5c04a533.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
bd16cbd2d6866544b614db1c8e7f6a2e22c83deb9b9b15d0fa56c34e5c04a533.exe
Resource
win11-20240426-en
General
-
Target
bd16cbd2d6866544b614db1c8e7f6a2e22c83deb9b9b15d0fa56c34e5c04a533
-
Size
2.3MB
-
MD5
c858279b34d2ea3982203ba11dc59cb3
-
SHA1
921227ece0c988c7ffb6b84ae7e93049d3148246
-
SHA256
bd16cbd2d6866544b614db1c8e7f6a2e22c83deb9b9b15d0fa56c34e5c04a533
-
SHA512
dcd536c491b04c6b0f34f3ecc3d843d1eed8db7ed9093fac9119bf3100896fb0676115929cb377ed766cea7e62842cb1ea4bfd95477379423efa64a75c2615bf
-
SSDEEP
49152:6KmwCA/jwPAxgLOh5V7vRTR83WyLt5whPCJiRfHf6HD9h:6KmLtPAxgCfV11gLt4MiRfS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd16cbd2d6866544b614db1c8e7f6a2e22c83deb9b9b15d0fa56c34e5c04a533
Files
-
bd16cbd2d6866544b614db1c8e7f6a2e22c83deb9b9b15d0fa56c34e5c04a533.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cfywexxv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oxyoczwi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE