Static task
static1
General
-
Target
bf7_unpack.exe
-
Size
10.4MB
-
MD5
e308c688535601557127c9982749df65
-
SHA1
58281dedf81639fa03a563de41830aa14528298e
-
SHA256
f7451856f198575c53417911d32088fd292ab27a08f7dc14f85336b148c2c216
-
SHA512
980575020331866348fb9dbd7d482e511f8ae7e5ceff0744924ecfd98ccdd8cb25354f762ef28bd19e33f6dfa777cba0103fe0624de455da5d2ead9781f54bc3
-
SSDEEP
98304:LE5j8agbloKV1QIB3JqltDJGI0kySzCExgq+4/GfiZRQ7jnN8u+x+xrFVBkxCb:o5jgxoKV9cGsyIg/UuH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf7_unpack.exe
Files
-
bf7_unpack.exe.exe windows:6 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 168KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9.1MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IDATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ