Static task
static1
Behavioral task
behavioral1
Sample
baf9fa5542e70c3ab76a648e5889806783e9e2cd481e295e2a3d4ea4032947a3.exe
Resource
win7-20230831-en
General
-
Target
baf9fa5542e70c3ab76a648e5889806783e9e2cd481e295e2a3d4ea4032947a3
-
Size
31KB
-
MD5
0694b394b66fcf60e573d9a39d919ccb
-
SHA1
e08d3afa8992932521b89268b725b35d51e255e7
-
SHA256
baf9fa5542e70c3ab76a648e5889806783e9e2cd481e295e2a3d4ea4032947a3
-
SHA512
9f4f2827336526b09b34f2f277cff8a7f8147ef47e84c6c0c4b289e6f46f0388cf288293d66baec6f40ac3153eb59d37e0d6f031e8221252cac739338c650dfa
-
SSDEEP
768:BgM0W8Yr3mmdI2kwH9l/AResmp86o3J+aE:BgM0W8tbRRet868
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baf9fa5542e70c3ab76a648e5889806783e9e2cd481e295e2a3d4ea4032947a3
Files
-
baf9fa5542e70c3ab76a648e5889806783e9e2cd481e295e2a3d4ea4032947a3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE