Static task
static1
Behavioral task
behavioral1
Sample
bf45ecb4ef6c82fb6d88e9e29120c2a5fce28933376b23e9e3acc05fb3859bf3N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf45ecb4ef6c82fb6d88e9e29120c2a5fce28933376b23e9e3acc05fb3859bf3N.exe
Resource
win10v2004-20240802-en
General
-
Target
bf45ecb4ef6c82fb6d88e9e29120c2a5fce28933376b23e9e3acc05fb3859bf3N
-
Size
168KB
-
MD5
ab7391ddfb4572cf9e21f99c0d445500
-
SHA1
2118f685b23c4b1791e32e81a649bbff089adba0
-
SHA256
bf45ecb4ef6c82fb6d88e9e29120c2a5fce28933376b23e9e3acc05fb3859bf3
-
SHA512
c396c98ca1d299ea420cc6031c8e1f50cc80e59a13cd6c443cac21be02f4a8e083e87ea47bb5dbaf4d8f022c1a196795f64d4b09625b9dbc1dc494008b2e9520
-
SSDEEP
3072:xroDOcBNPyygE2cpFwpDuJ8mF9YNTyr4p9t4W987u1j5FaoJ5pFwr:NoXBNTgqFwpo8mFCNkq9tr987u1dFVr0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf45ecb4ef6c82fb6d88e9e29120c2a5fce28933376b23e9e3acc05fb3859bf3N
Files
-
bf45ecb4ef6c82fb6d88e9e29120c2a5fce28933376b23e9e3acc05fb3859bf3N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ