Static task
static1
Behavioral task
behavioral1
Sample
ba695bb4e3d83d370d15fef8a30300db.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ba695bb4e3d83d370d15fef8a30300db.exe
Resource
win10v2004-20230220-en
General
-
Target
ba695bb4e3d83d370d15fef8a30300db.bin
-
Size
6.4MB
-
MD5
ba695bb4e3d83d370d15fef8a30300db
-
SHA1
6aa9b8b9590e1f5272e5f7e8f83e6bd8bf2e0046
-
SHA256
32febcce9afbe2ccd75512adcaee3d42388f568a35bfc79beedab3966a30fe9d
-
SHA512
dc3767f429a0c561bf9cdc9bbf69805fbc317f749d20f80a698c1c661780f32b02a1db2ffffeedd5ef8c67176450c2a791d0078d4380cedd0084c131bb3b29cc
-
SSDEEP
196608:yty/0BcLhjV1bUi7a+6mUpAaCdlm8Pp38CX/:yty/0QHbUiW+soP2C
Malware Config
Signatures
Files
-
ba695bb4e3d83d370d15fef8a30300db.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.msBE Size: - Virtual size: 920KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WTVf Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE