Static task
static1
Behavioral task
behavioral1
Sample
bf4820f948328fd27ec96fb3a02fdb173eddf18b3108163420b740c9832ad672.exe
Resource
win7-20241023-en
General
-
Target
bf4820f948328fd27ec96fb3a02fdb173eddf18b3108163420b740c9832ad672.exe
-
Size
65KB
-
MD5
649a543e61238c9c9081599d0d14ea5c
-
SHA1
8e4acd4c3faa084b124318299c190fa9d6600ebd
-
SHA256
bf4820f948328fd27ec96fb3a02fdb173eddf18b3108163420b740c9832ad672
-
SHA512
70a55e293c9d3fa181428e674e96ff437ff30b844713c5af950040b5884c87ecae235821b4be6da045eda1b9b2c9831e5b75f4e77696d86086ffdba8e54519bf
-
SSDEEP
1536:od0Tgm2iNiNlSXTZJsKYt7WIhqK5MIWU9:q0TgmtJ/skIj51J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf4820f948328fd27ec96fb3a02fdb173eddf18b3108163420b740c9832ad672.exe
Files
-
bf4820f948328fd27ec96fb3a02fdb173eddf18b3108163420b740c9832ad672.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE