Static task
static1
Behavioral task
behavioral1
Sample
baf0a98ea4328d906b97d2ae6ed932ba0562a0740589e50f821cce7cbe79a356.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
baf0a98ea4328d906b97d2ae6ed932ba0562a0740589e50f821cce7cbe79a356.exe
Resource
win10v2004-20230915-en
General
-
Target
baf0a98ea4328d906b97d2ae6ed932ba0562a0740589e50f821cce7cbe79a356
-
Size
1.3MB
-
MD5
643c32a49721a1d4667b01b0b0224c5e
-
SHA1
57c3820867dc9ef6f0709a224263e0ec0a201481
-
SHA256
baf0a98ea4328d906b97d2ae6ed932ba0562a0740589e50f821cce7cbe79a356
-
SHA512
8cad2ab4d72263cfc35106140a5c23963febd322f2ff9e11fdb67098cb5444796b1ba116ce0bff6ddd4690b6390e90da13206f4160619f06d8998f5c6f889d7e
-
SSDEEP
24576:r+OuioBBCnx+QJ529+RipvL1SXk1QE1RGOTnIEQc4au9NgxnHNnu:qA4uxw9+ApwXk1QE1RzsEQPaxHNu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baf0a98ea4328d906b97d2ae6ed932ba0562a0740589e50f821cce7cbe79a356
Files
-
baf0a98ea4328d906b97d2ae6ed932ba0562a0740589e50f821cce7cbe79a356.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE