Static task
static1
Behavioral task
behavioral1
Sample
bf60b9ff96fbb56d1e6cdee3e2933ed0N.exe
Resource
win7-20240903-en
General
-
Target
bf60b9ff96fbb56d1e6cdee3e2933ed0N.exe
-
Size
410KB
-
MD5
bf60b9ff96fbb56d1e6cdee3e2933ed0
-
SHA1
5171fd5251978633ee6f89d402fd288db3388833
-
SHA256
eb5c9251d0d7344b450918c22fbddbd1d772c4a8aadd32d176e38989b458ffef
-
SHA512
e8255e0dd163760e76296d8751ed412e727b48b92eeb2834d3e9f57810ac65e862e4322bc322aa9a33ec3452c2ccdab8a67677e2b02df039329ce7a60940ec8b
-
SSDEEP
6144:ITNE3ZRrnaBVlvphVxmP+6CiejgcME1cwYfU+va+u:ITNYrnE3bm/CiejewY5vG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf60b9ff96fbb56d1e6cdee3e2933ed0N.exe
Files
-
bf60b9ff96fbb56d1e6cdee3e2933ed0N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ