Static task
static1
Behavioral task
behavioral1
Sample
154115000016 ORIGINAL BL/154115000016 ORIGINAL BL.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
154115000016 ORIGINAL BL/154115000016 ORIGINAL BL.exe
Resource
win10v2004-20241007-en
General
-
Target
b4af503b7d9179eb808b870b5c8e7315a73b450aa34c7a34b0e04ab37c6b704e
-
Size
317KB
-
MD5
141bf5870f0ca9970ac435c906c02f94
-
SHA1
2d42ac258a0d71961ff17a27a6b6a4ee5edcea91
-
SHA256
b4af503b7d9179eb808b870b5c8e7315a73b450aa34c7a34b0e04ab37c6b704e
-
SHA512
eafea048ee47c02a5e42010d156a19c1d50a93f28ef07f2f7016c103c30898de62829d241272c42f37ee330242fd21597c3ee8858ef84595efa9fda9d9292c07
-
SSDEEP
6144:+2xFKNaKy75wu+GO2P1wHfUuG/WggmZP7dZDj4tS8zC7+LdK/XLWFyiLqs:+U8apVwg9HJHZP7AtxzPhFyYqs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/154115000016 ORIGINAL BL/154115000016 ORIGINAL BL.exe
Files
-
b4af503b7d9179eb808b870b5c8e7315a73b450aa34c7a34b0e04ab37c6b704e.zip
-
154115000016 ORIGINAL BL/154115000016 ORIGINAL BL.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 402KB - Virtual size: 402KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ