Static task
static1
Behavioral task
behavioral1
Sample
bd4162a755872b29e29d202c66b9f4303a77088a66c37cd406b9935a2424dbb4N.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
bd4162a755872b29e29d202c66b9f4303a77088a66c37cd406b9935a2424dbb4N.exe
Resource
win10v2004-20250211-en
General
-
Target
bd4162a755872b29e29d202c66b9f4303a77088a66c37cd406b9935a2424dbb4N.exe
-
Size
1.8MB
-
MD5
9bfe7c5c13a8f98fa1ab0484286ec4f0
-
SHA1
be8bec47c9ee532880aeb049f5bafe335b4ca69a
-
SHA256
bd4162a755872b29e29d202c66b9f4303a77088a66c37cd406b9935a2424dbb4
-
SHA512
16dd0363e8f7e91b997ac60386db908a766e6f9aa20dc2d182a1d385defe4737d03e6e93e851495c9aa022390f207934df532ed901652aff288488269bb74c89
-
SSDEEP
49152:lMD1jNLRN9A25+BegKOa+XDenfpQAisdRJnImUubXY4YsP:CBNN9A25i9rTef6ATfTP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd4162a755872b29e29d202c66b9f4303a77088a66c37cd406b9935a2424dbb4N.exe
Files
-
bd4162a755872b29e29d202c66b9f4303a77088a66c37cd406b9935a2424dbb4N.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 162KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yywwhzdo Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxqkhnwe Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE