Static task
static1
Behavioral task
behavioral1
Sample
f479f38a447115e8257eff05fcba0121165fdb6a35773b9d433460cc6295d5c7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f479f38a447115e8257eff05fcba0121165fdb6a35773b9d433460cc6295d5c7.exe
Resource
win10v2004-20230915-en
General
-
Target
f479f38a447115e8257eff05fcba0121165fdb6a35773b9d433460cc6295d5c7
-
Size
24KB
-
MD5
6cad4ea18577030e7639f4a11df7a8dd
-
SHA1
f86cdf5d6c91c48ec5189850b2bb5dd130b462a5
-
SHA256
f479f38a447115e8257eff05fcba0121165fdb6a35773b9d433460cc6295d5c7
-
SHA512
7b888ab5bb2aec3427beabf2e9b5e2aca71093b13468821a20aa8d5b1cb462c9ea033c7fb683eb4b60a974c26bbf64ff139a85a603a22dbc1770f185402d998d
-
SSDEEP
192:uFWaUow16Ny8OIg+LNJVkcA/zODu4BEn9Y7nFJamw16Ny8OJ:BN16NAckcOcuN9QFJu16NAJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f479f38a447115e8257eff05fcba0121165fdb6a35773b9d433460cc6295d5c7
Files
-
f479f38a447115e8257eff05fcba0121165fdb6a35773b9d433460cc6295d5c7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
mybaibai Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 844B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ