Static task
static1
Behavioral task
behavioral1
Sample
bc1320cd0827fc36a1a596c8050438c3cb59dcf2076444d70306fbc141193ebf.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc1320cd0827fc36a1a596c8050438c3cb59dcf2076444d70306fbc141193ebf.exe
Resource
win10v2004-20240802-en
General
-
Target
bc1320cd0827fc36a1a596c8050438c3cb59dcf2076444d70306fbc141193ebf
-
Size
5.6MB
-
MD5
7d2772030fa1c9842988738cfe581d80
-
SHA1
7dc34f9af8f9520551ae72bb4384fd3ab72c6201
-
SHA256
bc1320cd0827fc36a1a596c8050438c3cb59dcf2076444d70306fbc141193ebf
-
SHA512
ba24389f22a575a09a33f4f224149ef7520049b9f0419eebbc8c665ebb9e2a967333c83e0c03153af201d61fc23a1476a68abdfb02f44223b4caa353a8c5dcac
-
SSDEEP
98304:gNvAPxOV+ntB9nSsXiq7/JS2AOCRlWTUYHEu+JD9s3dW9e37PDP9Bv+n+HQtuY98:8RVMB9KIJS2AfmweF+h9sce37PD9w+ew
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc1320cd0827fc36a1a596c8050438c3cb59dcf2076444d70306fbc141193ebf
Files
-
bc1320cd0827fc36a1a596c8050438c3cb59dcf2076444d70306fbc141193ebf.exe windows:4 windows x86 arch:x86
51d56009838b1f4b5306d4e0bce210bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
iphlpapi
GetAdaptersInfo
winmm
midiStreamRestart
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
kernel32
GetVersion
user32
GetSysColorBrush
gdi32
GetStockObject
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
VariantInit
comctl32
ord17
wininet
InternetCanonicalizeUrlA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 4.3MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ