bgsU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b371f30f8a988c595f16418783ce61a2c5ca92cd94e76f9923f0b41b06d10c46.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b371f30f8a988c595f16418783ce61a2c5ca92cd94e76f9923f0b41b06d10c46.exe
Resource
win10v2004-20241007-en
General
-
Target
b371f30f8a988c595f16418783ce61a2c5ca92cd94e76f9923f0b41b06d10c46.exe
-
Size
776KB
-
MD5
63e8201de5c2dd6ae511ef05137cec09
-
SHA1
b80b8f6220ea23f0ecc549d2c14c621779bf0641
-
SHA256
b371f30f8a988c595f16418783ce61a2c5ca92cd94e76f9923f0b41b06d10c46
-
SHA512
aa1f92f89264a4278b904422ae29cca5f1832678879bb37273a906f4d4517d47aceca2922d6e2abaacac5dcda8b51ec9c38bd28f66e98e3a26f0f4e5a848e2a1
-
SSDEEP
24576:8kUKu306jr2wcjWKLafXP5NqekRCtYhM:89tILaaekRp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b371f30f8a988c595f16418783ce61a2c5ca92cd94e76f9923f0b41b06d10c46.exe
Files
-
b371f30f8a988c595f16418783ce61a2c5ca92cd94e76f9923f0b41b06d10c46.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 770KB - Virtual size: 769KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ