Static task
static1
Behavioral task
behavioral1
Sample
bf66c57ddedff135697f519e883eb73817f95e3e591079c17b3ee6c5aa1f6598.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf66c57ddedff135697f519e883eb73817f95e3e591079c17b3ee6c5aa1f6598.exe
Resource
win10v2004-20250217-en
General
-
Target
bf66c57ddedff135697f519e883eb73817f95e3e591079c17b3ee6c5aa1f6598
-
Size
685KB
-
MD5
09bca025504d51921fea0c27fed0f570
-
SHA1
d07867cf868e70188478b98c3ee2d176f63a8153
-
SHA256
bf66c57ddedff135697f519e883eb73817f95e3e591079c17b3ee6c5aa1f6598
-
SHA512
8f1acb9ef6a1a60335949f1deab733ca43baaa53c73370fbdf4280deedd16eaf9a7411e09a152c0af59c6312a7a93c71b20ea30a3b03cf28212091783f5e533a
-
SSDEEP
12288:o383le9ciUcsw99WWoQCIgeHPbH/jTlWv+AURMbHR9VlQPrVYV:a3Wcp9dtCI7HPL3EGfMhlCK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf66c57ddedff135697f519e883eb73817f95e3e591079c17b3ee6c5aa1f6598
Files
-
bf66c57ddedff135697f519e883eb73817f95e3e591079c17b3ee6c5aa1f6598.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 675KB - Virtual size: 675KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ