Static task
static1
Behavioral task
behavioral1
Sample
0ba2d870e530157e4dadf31010c2b119.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ba2d870e530157e4dadf31010c2b119.exe
Resource
win10v2004-20231215-en
General
-
Target
0ba2d870e530157e4dadf31010c2b119
-
Size
89KB
-
MD5
0ba2d870e530157e4dadf31010c2b119
-
SHA1
332e50ba3956d900ae61c8e8bd9499a8654aa384
-
SHA256
478f25f63a3053a35a011fe61dc0d514577a19325ed8dff952749f0ff765e167
-
SHA512
949f1fc170f9ba00c09ae17aad3368b32233f7dab3e1c5e0e69e31629e44b952eabc0cf4c7f6f87f6dd6020f406838137f50c8c6f997a6c3deb7c5ec69d660f2
-
SSDEEP
1536:NSvyJazTCuiwrDtdaRKdT7OSqrnF/E0m:AhzTCuHvawt7OSu6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba2d870e530157e4dadf31010c2b119
Files
-
0ba2d870e530157e4dadf31010c2b119.exe windows:4 windows x86 arch:x86
ace7d05e3ed98cceadeee74b6a85e23b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
FindAtomA
lstrlenA
CloseHandle
GetModuleHandleA
GetConsoleFontSize
GetLastError
SetEvent
CreateThread
FindClose
Sleep
TlsGetValue
GetDiskFreeSpaceA
ReleaseMutex
DeleteCriticalSection
VirtualProtect
FindResourceExA
SearchPathA
ExitProcess
GetTickCount
user32
EndDialog
GetMessageA
DialogBoxParamA
GetKeyState
GetScrollBarInfo
IsIconic
DispatchMessageA
CopyImage
CloseWindow
CreateWindowExA
CreateMenu
EnableWindow
DragDetect
CopyIcon
wshbth
WSHNotify
WSHOpenSocket2
NSPStartup
WSHIoctl
WSHJoinLeaf
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
umknbdn Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE