Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-BABE.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
GOLAYA-BABE.exe
Resource
win10v2004-20220812-en
General
-
Target
81b256fd407cc6f519e616e0bb11a40e5d030b7b69b925dbb2470b649a2dcf4f
-
Size
100KB
-
MD5
3b03159e29d99110d8cfeae604345f20
-
SHA1
3de3e66b7e67ca19472ac2404b8b32c775db5c75
-
SHA256
81b256fd407cc6f519e616e0bb11a40e5d030b7b69b925dbb2470b649a2dcf4f
-
SHA512
431ed2136d978e68c77976a93c8085871127ad854ced2f7b62d67838c82f96cea4027606006dc524576f98d7d6fb05cd0843260b2887aa8d0a3f56ff7e0510d2
-
SSDEEP
3072:j47excGxFLPkH9SnbZDaZRKc3vAHZlUz8YwjajE70z7:j+eGYtPk0Z+Zd3vjvgTG7
Malware Config
Signatures
Files
-
81b256fd407cc6f519e616e0bb11a40e5d030b7b69b925dbb2470b649a2dcf4f.zip
-
GOLAYA-BABE.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ