Static task
static1
Behavioral task
behavioral1
Sample
ba07fd2ba5cb1c8164d974345bdfeca21c5a47183b164319bb77b4ab8e093ea3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ba07fd2ba5cb1c8164d974345bdfeca21c5a47183b164319bb77b4ab8e093ea3.exe
Resource
win10v2004-20230831-en
General
-
Target
ba07fd2ba5cb1c8164d974345bdfeca21c5a47183b164319bb77b4ab8e093ea3
-
Size
7.3MB
-
MD5
f6d7166f7375e4a68a637451cca30e15
-
SHA1
4bedc30213ba405ed172d5b6cb1c4728dea08e6a
-
SHA256
ba07fd2ba5cb1c8164d974345bdfeca21c5a47183b164319bb77b4ab8e093ea3
-
SHA512
280720e200ae80535112e915d883f72c7a35fa65c91109b944e1bde9377f27ce04804931bc399401493339fd426b08985d70724b90d9d186fc14422746306d44
-
SSDEEP
98304:p9DnBLWcAhwluILo9QWhm7K7M4RoUCNzjcQ5OM/90psx6sXiID3pU4U3wCHo2cGk:4c/Gp47I4Z54IK4tCHaB5R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba07fd2ba5cb1c8164d974345bdfeca21c5a47183b164319bb77b4ab8e093ea3
Files
-
ba07fd2ba5cb1c8164d974345bdfeca21c5a47183b164319bb77b4ab8e093ea3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xilou Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xilou Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xilou Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE