Static task
static1
Behavioral task
behavioral1
Sample
ba383edc1c70d8f969f02c3c7fc41aed747e3047c55f68a4b892446476bcdf37.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ba383edc1c70d8f969f02c3c7fc41aed747e3047c55f68a4b892446476bcdf37.exe
Resource
win10v2004-20230220-en
General
-
Target
ba383edc1c70d8f969f02c3c7fc41aed747e3047c55f68a4b892446476bcdf37
-
Size
3.2MB
-
MD5
78549bc9130602d3008e23cfdd808742
-
SHA1
3cb324ceb68cc033a98756aadae74452b7e06d0c
-
SHA256
ba383edc1c70d8f969f02c3c7fc41aed747e3047c55f68a4b892446476bcdf37
-
SHA512
a1d1e9b5406b7524983a7003171051e2780515d1ccc9ef932f087b1b1aff97ba49370dc9287b069e002f0cfc849a7d24266e65ac8f6d2d6971f96d9a1d788769
-
SSDEEP
98304:z9jEVz+JLH0R6pXMlamvJQ/CWShr2K09gAaUczX:z9jEh+50QcomvJn3hr2KT+cD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba383edc1c70d8f969f02c3c7fc41aed747e3047c55f68a4b892446476bcdf37
Files
-
ba383edc1c70d8f969f02c3c7fc41aed747e3047c55f68a4b892446476bcdf37.exe windows x86
e4e2dec77f659fcfee5bb8d4e6fce3d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc90u
ord6060
msvcr90
_CIsin
kernel32
GetLastError
user32
EnableScrollBar
shell32
SHAppBarMessage
shlwapi
PathFileExistsW
oleaut32
SysFreeString
msvcp90
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
gdiplus
GdipCreateStringFormat
imagehlp
ImageDirectoryEntryToData
winmm
PlaySoundW
gdi32
CreateBitmap
advapi32
RegCloseKey
comctl32
_TrackMouseEvent
ole32
CreateStreamOnHGlobal
urlmon
FindMimeFromData
wininet
HttpSendRequestW
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.3MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lrdata Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lrdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ