Static task
static1
Behavioral task
behavioral1
Sample
2ba1c1d05754852dc83ad3bd91c5d202.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2ba1c1d05754852dc83ad3bd91c5d202.exe
Resource
win10v2004-20231215-en
General
-
Target
2ba1c1d05754852dc83ad3bd91c5d202
-
Size
80KB
-
MD5
2ba1c1d05754852dc83ad3bd91c5d202
-
SHA1
e528ebe5dd8bb68a076e5d5a1e8a8a6c62dd5c4e
-
SHA256
754a878419d73ed4a9787b277d50b264a3552485aaf2fd3e15b73b89c6323b4e
-
SHA512
e2944fb21a06204a9bd0df209d3e6a185d68f37d5608986bcc638f7513e34bbb93daab77b30a52c1990a3b37a28715b362a6c14f536bc6d26dd5355c1645d12c
-
SSDEEP
1536:NhGHH5VAA9BpoWMQ7WBQM/W2K0rcgsM5XRGUmsHb/p7iac1m9:N0H8A9MWn7aV3K6HVRG/u7zcm9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ba1c1d05754852dc83ad3bd91c5d202
Files
-
2ba1c1d05754852dc83ad3bd91c5d202.exe windows:5 windows x86 arch:x86
1b3acbcfa2eea176392a54012327f42e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_XcptFilter
strlen
_write
_exit
_except_handler3
_initterm
sin
__p__commode
malloc
fprintf
_adjust_fdiv
_acmdln
exit
__set_app_type
_onexit
free
fclose
__getmainargs
fwrite
fopen
strcmp
__setusermatherr
user32
GetDesktopWindow
kernel32
GetStartupInfoA
GetModuleHandleW
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE