Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-BABE.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GOLAYA-BABE.exe
Resource
win10v2004-20220812-en
General
-
Target
fb06677c1a264b94c52b9fbbf295aee6a4e4a532bd1bc8b7c98a12b1e4a43bdb
-
Size
99KB
-
MD5
59a55f6cba682f0560ea7b0641ec43c7
-
SHA1
918cc99ee4e509521b65f25e8a248739420bb8cb
-
SHA256
fb06677c1a264b94c52b9fbbf295aee6a4e4a532bd1bc8b7c98a12b1e4a43bdb
-
SHA512
9a7ca67d8858979de08ebedcec420fda343f01c7ea1f9686bac7a56120a6a1c2063b9d6d204b9c3e70f3cf368a3f7ffa916b92ea2c8dc452cd902e38e28a83f9
-
SSDEEP
3072:R47excGxFLPkH9SnbZDazo21mLtQqVI+8iXX:R+eGYtPk0Z+zo6JDiXX
Malware Config
Signatures
Files
-
fb06677c1a264b94c52b9fbbf295aee6a4e4a532bd1bc8b7c98a12b1e4a43bdb.zip
-
GOLAYA-BABE.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ