Static task
static1
Behavioral task
behavioral1
Sample
bcf598ddc301d322d584f77e8af0d743bcd5bf7dd88186f5848f5772e82d859aN.dll
Resource
win7-20240903-en
General
-
Target
bcf598ddc301d322d584f77e8af0d743bcd5bf7dd88186f5848f5772e82d859aN.exe
-
Size
120KB
-
MD5
2487825a63e3c5794ccbd944e7696bc0
-
SHA1
1e289585de2a403e8bbe28ed189baee51d547142
-
SHA256
bcf598ddc301d322d584f77e8af0d743bcd5bf7dd88186f5848f5772e82d859a
-
SHA512
e076dce5fdc7dec44ad18c054dbfd1640312d021b90387a1cd38dab3e1a009862baf4fd782fee311e84c4ba3d1ace3c963693f9fd83a0c12d2daa33ae841e9c4
-
SSDEEP
3072:JVhpdGEE6P6MF4ABPn3M62B5gUeP5j50+l:JVhTFEJAB/cfyUeF+S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcf598ddc301d322d584f77e8af0d743bcd5bf7dd88186f5848f5772e82d859aN.exe
Files
-
bcf598ddc301d322d584f77e8af0d743bcd5bf7dd88186f5848f5772e82d859aN.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ