Static task
static1
Behavioral task
behavioral1
Sample
bed935b2f56cefb81472fbee6327c35db4e82a57fd97c5caa133977a9db6a5fc.exe
Resource
win7-20240903-en
General
-
Target
bed935b2f56cefb81472fbee6327c35db4e82a57fd97c5caa133977a9db6a5fc
-
Size
1.8MB
-
MD5
bf698063d67816dfb55d93238f45b46c
-
SHA1
3d5d42d1b4357d294e22c43953e667b98cc0371b
-
SHA256
bed935b2f56cefb81472fbee6327c35db4e82a57fd97c5caa133977a9db6a5fc
-
SHA512
e2b9d3b285d7cb4ca90645f1a2dca6160a9a3a83246a96cb74f53dd0833c4cd1c44968bb372fcbbd85ef64a8dd7b16a44f31bd6ab033ff93b56312da8de70cce
-
SSDEEP
49152:HkBNvrVFlVXTNbDaIrY7DgjIiWqGPD8PSnaA6HCerO:Hk/lVXTND5rY7DgjkDySaJB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bed935b2f56cefb81472fbee6327c35db4e82a57fd97c5caa133977a9db6a5fc
Files
-
bed935b2f56cefb81472fbee6327c35db4e82a57fd97c5caa133977a9db6a5fc.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bzbnrixn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sowcbhuu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE