Static task
static1
Behavioral task
behavioral1
Sample
ba0795f55c281709b7b4e66f0a369edd6f31db942652b7dcc206d4055cc38406.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ba0795f55c281709b7b4e66f0a369edd6f31db942652b7dcc206d4055cc38406.exe
Resource
win10v2004-20230915-en
General
-
Target
ba0795f55c281709b7b4e66f0a369edd6f31db942652b7dcc206d4055cc38406
-
Size
14.7MB
-
MD5
ed01a689df7428c8e103a5f58feacd63
-
SHA1
447625461a1edbe48280d51e77f52dc06fd69c78
-
SHA256
ba0795f55c281709b7b4e66f0a369edd6f31db942652b7dcc206d4055cc38406
-
SHA512
7d19d5b5133c792513e13c60a8aa5d023a100b3352a0da5bd71d379ca3e83903e642991b7cde5d376fba97c1ade737b0635262bd5d10517544c19b93694e9128
-
SSDEEP
393216:QNxIJk6gSEH2Hw6MYB6Gq/iaWxFBkQ2+oSMZDed4IAlDp6pEC9U:S4k6gSuX6K/iaqFBkQ2F/ZDvpp6iC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba0795f55c281709b7b4e66f0a369edd6f31db942652b7dcc206d4055cc38406
Files
-
ba0795f55c281709b7b4e66f0a369edd6f31db942652b7dcc206d4055cc38406.exe windows:5 windows x86
ebed2df87c11a3536a7d22ba1f8af4e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
RegisterClassA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
gdi32
StretchBlt
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
wtsapi32
WTSSendMessageW
Sections
Size: - Virtual size: 801KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 11.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 13.4MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 736KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 556KB - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ