Static task
static1
Behavioral task
behavioral1
Sample
BA form.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
BA form.exe
Resource
win10v2004-20230220-en
General
-
Target
BA form.exe
-
Size
637KB
-
MD5
2d64651ad344d20a3726a5d308c4e2b8
-
SHA1
ac7c9dac64121c0e2586425d7769a6ae8179da75
-
SHA256
0b8f8615ac9193f5409cc48943cdc3e66fd58027058e594b4433ba110b94e197
-
SHA512
151ccc1e98d879517e647544476428ff34b4a60732b09bc6f2acd20878a91783913cd31a894116db4855fe10c5f2fc0c065a02f41bf9def6aea72129a362b82f
-
SSDEEP
12288:o8gBO5ZZC/W2n9Jgxf+084TTCOTkwjdJHB2QBkbYsTmysIEIsO2nY:rgqTC/fDgxFJTCOTJ5JHTkcZfIsO
Malware Config
Signatures
Files
-
BA form.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 624KB - Virtual size: 623KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ