Static task
static1
Behavioral task
behavioral1
Sample
bf214f02b37232d2ef41692ab37799897c076b6bf333970a9e79a2f326291588.exe
Resource
win10v2004-20240508-en
General
-
Target
bf214f02b37232d2ef41692ab37799897c076b6bf333970a9e79a2f326291588
-
Size
1.8MB
-
MD5
04a428c0416a58b182ed49f2d3af8313
-
SHA1
a863d597d3b0d7b87c52c81dd0b5e57e2c562547
-
SHA256
bf214f02b37232d2ef41692ab37799897c076b6bf333970a9e79a2f326291588
-
SHA512
8ba8cf413ba7fb5f88779c4280346dfd142ebe97c878b27f445cff9fd112e9e853f1983802b861379c608de4d546cbb7d9bc8848d582be50bcb056695ab9e800
-
SSDEEP
49152:j7/XrqHUn1ufmL8uLlChLK38fgLKx9JlZi5o1vTH3bW6FEEK:f/FuuL8uLlCQWxPlZi5o1fW6qE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf214f02b37232d2ef41692ab37799897c076b6bf333970a9e79a2f326291588
Files
-
bf214f02b37232d2ef41692ab37799897c076b6bf333970a9e79a2f326291588.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ifpbzbvx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iarxuzfc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE