Static task
static1
Behavioral task
behavioral1
Sample
bdc5b0ecf99ce336ad13d7ec7b209280N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bdc5b0ecf99ce336ad13d7ec7b209280N.exe
Resource
win10v2004-20240802-en
General
-
Target
bdc5b0ecf99ce336ad13d7ec7b209280N.exe
-
Size
5.0MB
-
MD5
bdc5b0ecf99ce336ad13d7ec7b209280
-
SHA1
90fbc5a795353e53f753eac83125bb78a3d7e25a
-
SHA256
e8fb2048ee5a000542a2b90ac38f35179c9a1aa9e2be48de324c1213d21605ec
-
SHA512
d59ff20d1504a4417027872582da43689ce1247f66e0592bc8e0849c99474cbc9b0ad671ca7aa3528037504b21f111f40df795852532b2231ef28422be995c79
-
SSDEEP
24576:7W9EqHh3Qh3OXupZrIQMphDBzAT/C/ny5Hla5DBMYc:yyqB6dpZ3eDBzATinyl+aYc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdc5b0ecf99ce336ad13d7ec7b209280N.exe
Files
-
bdc5b0ecf99ce336ad13d7ec7b209280N.exe.exe windows:4 windows x86 arch:x86
7568fd2720750e36a6992434b5b7efe9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetLastError
Sleep
GetLocaleInfoA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
CloseHandle
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetFilePointer
ReadFile
GetConsoleMode
GetConsoleCP
GetConsoleOutputCP
WriteFile
SetStdHandle
DeleteFileA
SetConsoleCtrlHandler
MultiByteToWideChar
CreateFileA
WideCharToMultiByte
SetEndOfFile
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UenWYouK Size: 31KB - Virtual size: 30KB
cKygkpGS Size: 39KB - Virtual size: 39KB
uCttnvfn Size: 25KB - Virtual size: 24KB
YCkpiYXa Size: 57KB - Virtual size: 56KB
xepcHYVz Size: 319KB - Virtual size: 319KB
HmerqCll Size: 21KB - Virtual size: 21KB
IRsbMZXV Size: 33KB - Virtual size: 32KB
SZsZKCNW Size: 5KB - Virtual size: 4KB
fytCktNi Size: 51KB - Virtual size: 50KB
NyJKdBVL Size: 19KB - Virtual size: 18KB
UHHHhAtk Size: 48KB - Virtual size: 47KB
TqPfmBoE Size: 6KB - Virtual size: 6KB
jEkGLeGP Size: 74KB - Virtual size: 73KB
FvIJRSgl Size: 29KB - Virtual size: 28KB
swqxEzug Size: 278KB - Virtual size: 277KB
xEfXNJqw Size: 58KB - Virtual size: 57KB
iNTaPRHL Size: 512B - Virtual size: 24B
BFBIIITl Size: 30KB - Virtual size: 29KB
ESxXrrLH Size: 98KB - Virtual size: 98KB
nVQWjBGO Size: 219KB - Virtual size: 219KB
PsAbmcQQ Size: 15KB - Virtual size: 14KB
dBYvQMqd Size: 50KB - Virtual size: 50KB
ajulTHmW Size: 49KB - Virtual size: 48KB
DaozFVlA Size: 54KB - Virtual size: 53KB
grVfZDkq Size: 9KB - Virtual size: 8KB
QaHNMwZM Size: 24KB - Virtual size: 24KB
obWbhwFn Size: 512B - Virtual size: 401B
uqYXeRZl Size: 2KB - Virtual size: 2KB
EFNoKbfL Size: 512B - Virtual size: 202B
ENpJZZPg Size: 57KB - Virtual size: 56KB
bXoEmBVP Size: 53KB - Virtual size: 53KB
plQSPmkS Size: 12KB - Virtual size: 12KB
SbrOqUwW Size: 2KB - Virtual size: 1KB
NkfEEKgs Size: 53KB - Virtual size: 52KB
TsUOKivf Size: 28KB - Virtual size: 27KB
RHTBKAKK Size: 33KB - Virtual size: 32KB
fLAHTQhO Size: 24KB - Virtual size: 23KB
jBliAONb Size: 32KB - Virtual size: 31KB
ewcToiPd Size: 43KB - Virtual size: 42KB
RZDRjSCz Size: 74KB - Virtual size: 74KB
ssAAacWb Size: 99KB - Virtual size: 98KB
VdQIWdSj Size: 225KB - Virtual size: 225KB
AJfLLHfQ Size: 63KB - Virtual size: 63KB
FQpnOBim Size: 36KB - Virtual size: 35KB
iDPMKKxK Size: 98KB - Virtual size: 97KB
KOsDrRXK Size: 32KB - Virtual size: 31KB
xgNeDRwo Size: 45KB - Virtual size: 45KB
afNJZisl Size: 14KB - Virtual size: 13KB
iDyDCzhM Size: 240KB - Virtual size: 239KB
uIgaLneS Size: 2KB - Virtual size: 1KB
TTJiilgM Size: 14KB - Virtual size: 14KB
rjQBRtXO Size: 5KB - Virtual size: 5KB
TxyvYyIB Size: 68KB - Virtual size: 68KB
hUjCWkfV Size: 8KB - Virtual size: 8KB
etkmDmHZ Size: 31KB - Virtual size: 30KB
UyQgdOJX Size: 27KB - Virtual size: 26KB
CsYigAmd Size: 8KB - Virtual size: 7KB
GrTCOtKH Size: 441KB - Virtual size: 440KB
nZSDJvJe Size: 44KB - Virtual size: 44KB
KsmdBcak Size: 512B - Virtual size: 472B
YHgTPpRc Size: 1KB - Virtual size: 1KB
lQyETQNQ Size: 1KB - Virtual size: 1KB
oZOHPBLP Size: 21KB - Virtual size: 21KB
HPKdZjQY Size: 51KB - Virtual size: 50KB
NlEsFdOE Size: 273KB - Virtual size: 272KB
mCdlffZx Size: 8KB - Virtual size: 7KB
GEWSMFAV Size: 6KB - Virtual size: 5KB