Static task
static1
Behavioral task
behavioral1
Sample
ba2e0e7a3af7331a22282f9b1b3554e164497bdbdfe2b617c9866e24b8f839b5.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ba2e0e7a3af7331a22282f9b1b3554e164497bdbdfe2b617c9866e24b8f839b5.exe
Resource
win10v2004-20230824-en
General
-
Target
ba2e0e7a3af7331a22282f9b1b3554e164497bdbdfe2b617c9866e24b8f839b5
-
Size
5.8MB
-
MD5
e73695e24bcc89ab071f21f6ae02da6c
-
SHA1
0c09d6bd546fc5133015ab388266dbb5707a194e
-
SHA256
ba2e0e7a3af7331a22282f9b1b3554e164497bdbdfe2b617c9866e24b8f839b5
-
SHA512
8e8e74a00c41d3d456be9bdba83bd639a52c79b927001afca5c2c2020935d6d15229fa7680f4a4d10173316747486b632b17c70cf6b171d23a83e96f45e6104e
-
SSDEEP
98304:M79XExGVHUILWOJmkFQVqnFLTvV3SpAQ5dbgfCKnu3KdAhfy4IgEsRK3s8s8PhKy:MBZHJWOcEEqRbFSJsfu2K6JlsRK87
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba2e0e7a3af7331a22282f9b1b3554e164497bdbdfe2b617c9866e24b8f839b5
Files
-
ba2e0e7a3af7331a22282f9b1b3554e164497bdbdfe2b617c9866e24b8f839b5.exe windows x86
a6599006c0ee1360311e4c26ddd7c6ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
user32
wsprintfA
IsWindowVisible
advapi32
RegCreateKeyExA
RegQueryValueA
gdi32
SetViewportExtEx
GetTextMetricsA
winspool.drv
OpenPrinterA
OpenPrinterA
comctl32
ord17
ord17
shlwapi
PathFileExistsA
StrTrimA
rasapi32
RasHangUpA
winmm
midiStreamRestart
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
ws2_32
recv
wininet
InternetCloseHandle
comdlg32
GetSaveFileNameA
secur32
GetUserNameExA
urlmon
URLDownloadToFileW
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE