Static task
static1
Behavioral task
behavioral1
Sample
ba5ce4b2f5399c353ee2a7f9b27f308d7ce11e4ba8221bf360dd3f3c7badc25d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba5ce4b2f5399c353ee2a7f9b27f308d7ce11e4ba8221bf360dd3f3c7badc25d.exe
Resource
win10v2004-20220812-en
General
-
Target
ba5ce4b2f5399c353ee2a7f9b27f308d7ce11e4ba8221bf360dd3f3c7badc25d
-
Size
40KB
-
MD5
2f8cc9a4b4393aa79ecd6ef486689497
-
SHA1
a0b334928f22996ee897777292167f0ad861da61
-
SHA256
ba5ce4b2f5399c353ee2a7f9b27f308d7ce11e4ba8221bf360dd3f3c7badc25d
-
SHA512
06abd48713cd26e301c9cd8c12f03cab830dda9ccdc9519c280cd8a1e6f13481af0234ea93c928e1ca1e09e3458b8bdcfddb9d037d7fd103dda1703e93984fea
-
SSDEEP
768:5UhOYreQYs8a06CeYqM4NnRBvDM0a0wJBlL5BRIgzyK56JWWc2j:5iOYreQAvH4NRBbq0AlL5k6B56JW5a
Malware Config
Signatures
Files
-
ba5ce4b2f5399c353ee2a7f9b27f308d7ce11e4ba8221bf360dd3f3c7badc25d.exe windows x86
0308f778791c5c98edf6595072b4ea72
Code Sign
d2:7d:f8:6b:bb:48:b9:fd:da:bb:30:5f:de:0a:7a:f8:35:98:89:f4Signer
Actual PE Digestd2:7d:f8:6b:bb:48:b9:fd:da:bb:30:5f:de:0a:7a:f8:35:98:89:f4Digest Algorithmsha1PE Digest MatchesfalseTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
VirtualFreeEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
CreateProcessA
GetModuleFileNameA
GetCurrentProcess
SetThreadContext
ResumeThread
GetThreadContext
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
msvcrt
malloc
fclose
??3@YAXPAX@Z
fread
fseek
fopen
free
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Wpack Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.12 Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ