Static task
static1
Behavioral task
behavioral1
Sample
bcea02c02fb5f2f5d29a7d5f84b95d0d14710d1664c58584564df3f9d7f8f085.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bcea02c02fb5f2f5d29a7d5f84b95d0d14710d1664c58584564df3f9d7f8f085.exe
Resource
win10v2004-20241007-en
General
-
Target
bcea02c02fb5f2f5d29a7d5f84b95d0d14710d1664c58584564df3f9d7f8f085.exe
-
Size
130KB
-
MD5
931664dac19974718a09afdd9faa12a4
-
SHA1
96d193c1037eb99d0d4a904d104ef1688b58643c
-
SHA256
bcea02c02fb5f2f5d29a7d5f84b95d0d14710d1664c58584564df3f9d7f8f085
-
SHA512
28c8b65b2c94de6bca0d6d73fb211672db30f26c67a31721891a5043940c2e32e270badbfa10cdf6c518e5ef27284726ded71dd3c98ff5d06d38faf7cf1f2a03
-
SSDEEP
1536:KK1Naj6OWSVNDlK4p5ZgcGoJ2wj68vPQwl+DgtWLwQQoluKzC9KhuVWti8xKdZq9:9aGoJ2g6kPQwlbMV/zXwWILZFIa+M+9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcea02c02fb5f2f5d29a7d5f84b95d0d14710d1664c58584564df3f9d7f8f085.exe
Files
-
bcea02c02fb5f2f5d29a7d5f84b95d0d14710d1664c58584564df3f9d7f8f085.exe.exe windows:5 windows x86 arch:x86
325e3ca5bce81125f43bbb95ad56aacf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
GetPrivateProfileSectionA
GetModuleHandleA
HeapFree
GetFileAttributesW
LocalFlags
GetCurrentProcess
RemoveDirectoryW
GetStringTypeA
FindClose
VirtualProtectEx
GlobalLock
GetStdHandle
GetCurrentThread
GetFileAttributesW
CreateDirectoryW
GetVersionExA
CloseHandle
GetPrivateProfileIntA
CreateEventA
SetLastError
user32
IsWindow
IsZoomed
PostMessageW
SetFocus
PeekMessageW
SetCursorPos
GetWindowLongW
IsDialogMessageA
IsCharLowerA
LoadCursorW
GetWindowTextW
wsprintfW
DispatchMessageA
ntmarta
AccConvertSDToAccess
AccGetExplicitEntries
AccConvertAclToAccess
AccFreeIndexArray
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ