Static task
static1
Behavioral task
behavioral1
Sample
bf4363c0091aa72b5173e63f8bd989a0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf4363c0091aa72b5173e63f8bd989a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
bf4363c0091aa72b5173e63f8bd989a0N
-
Size
1.1MB
-
MD5
bf4363c0091aa72b5173e63f8bd989a0
-
SHA1
a3eebd51e8c2fc1f015773611e1f0c4793988911
-
SHA256
9ef78fd8be38b35275c1b4bedf4c1f4d73c7427b2d8f2d02530bafeae91b48a0
-
SHA512
481341271b4e685f29154fd55f9d60ab8f597c09e5bc422dc0e8584300a27cf49b7b2a47b2d884f1065688c7aa13f25686449636d15433d5d579df6cdbe30f61
-
SSDEEP
12288:qf+njKv7m05XEvG6IveDVqvQ6IvYvc6IveDVqvQ6IvIn+v7vc6IveDVqvQ6Iv5dW:qYj16X1q5h3q5hkntq5hU6X1q5h3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf4363c0091aa72b5173e63f8bd989a0N
Files
-
bf4363c0091aa72b5173e63f8bd989a0N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfbbql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ