Static task
static1
Behavioral task
behavioral1
Sample
bf16d56d3b43f3daca1ea8284f9cb56aa69ca5785f396c4bc4b1e005a3f667d1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf16d56d3b43f3daca1ea8284f9cb56aa69ca5785f396c4bc4b1e005a3f667d1.exe
Resource
win10v2004-20240802-en
General
-
Target
bf16d56d3b43f3daca1ea8284f9cb56aa69ca5785f396c4bc4b1e005a3f667d1
-
Size
3.5MB
-
MD5
5e5bec4638bc2baacf7d52c6129df30d
-
SHA1
e451ee64986bec010e4a1862b46b0f24f05d3a34
-
SHA256
bf16d56d3b43f3daca1ea8284f9cb56aa69ca5785f396c4bc4b1e005a3f667d1
-
SHA512
929538dc16850d525bf27a4bd8fea249052951257198aa56b8aaf3adfae936ab3712d2fdbbd17d10084c21627e0addfbeee640818ed62a4396a8d26c325803c4
-
SSDEEP
98304:DZZnWeEeboGAWVhnXntT/1sQIPi7p+tIgC:dZWZeboGAmh3F/1sfPZtI/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf16d56d3b43f3daca1ea8284f9cb56aa69ca5785f396c4bc4b1e005a3f667d1
Files
-
bf16d56d3b43f3daca1ea8284f9cb56aa69ca5785f396c4bc4b1e005a3f667d1.exe windows:6 windows x64 arch:x64
b193001bd07bc12ff352f57d2a461952
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
LoadLibraryExW
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MessageBoxW
Sections
.text Size: - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.'Gl Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.]p' Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.awK Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ