Overview

overview

10

Static

static

1

1eb9e4d943...8b.exe

windows7-x64

8

1eb9e4d943...8b.exe

windows10-2004-x64

10

Bronchial.ps1

windows7-x64

3

Bronchial.ps1

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    1eb9e4d9431c70bfd18beb58430bc81724eaff21837dd1faf012c83921a6418b.exe
  • Size 655KB
  • Sample241009-blympa1gpb
  • SHA256 1eb9e4d9431c70bfd18beb58430bc81724eaff21837dd1faf012c83921a6418b
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 1eb9e4d9431c70bfd18beb58430bc81724eaff21837dd1faf012c83921a6418b.exe
    .exe 655KB
  • Bevidstgjorde.ren
    467KB
  • Bronchial.Rev
    .ps1 53KB
  • Yellowfin.pre
    425KB
  • dropforger.Tac
    301KB
  • kakaosmrs.txt
    356B

1eb9e4d9431c70bfd18beb58430bc81724eaff21837dd1faf012c83921a6418b.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 1eb9e4d9431c70bfd18beb58430bc81724eaff21837dd1faf012c83921a6418b
  • MD5 SHA1 SHA512 SSDEEP
windows:4windowsx86arch:x86

PE Signature issue

Digest
f9:4f:a4:83:d4:b0:d1:c1:89:c2:01:3f:96:f7:bb:7d:4a:01:ed:9e:00:8b:2a:c8:1f:69:14:e5:a6:28:6e:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Klistres Nostrification Lejens\ ,L=Bucyrus,ST=Kansas,C=US,1.2.840.113549.1.9.1=#0c1b436f6e6368696e696e65404b6f6c6c656b74697669736d652e456e
Chains

Oct 8, 2024

Minor OS version
0
Major OS version
4
Entry point
13164
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths