D:\ovHkj\axPahpR\TvmCxpc\fiwA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ba08a34d0debc35c9766484256692fa8.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ba08a34d0debc35c9766484256692fa8.exe
Resource
win10v2004-20240226-en
General
-
Target
ba08a34d0debc35c9766484256692fa8
-
Size
61KB
-
MD5
ba08a34d0debc35c9766484256692fa8
-
SHA1
786688b0a502f13d1d5a0efcf42ccf02b2143565
-
SHA256
e972f09ece4e45b444e82441bfb50d629930cf7662c54ebff39c8c9d68af4b74
-
SHA512
f7b318ab945a221d27dec4778722ed00ada961bed7123e43260351be8a659c77e53d1a4bb3b60db0b2df557e7e1166cc94a66ba03a1c944e4f5e1b0757ef0f1a
-
SSDEEP
1536:jHodfNO5L56QfpPMxX1BnfomKCY2+M32DgLDr3:j+oIQfpPOX1pQGYfakgLP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba08a34d0debc35c9766484256692fa8
Files
-
ba08a34d0debc35c9766484256692fa8.exe windows:5 windows x86 arch:x86
402ed9e4f401e65c78f794b3d4d2be75
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetDialogBaseUnits
HiliteMenuItem
GetWindowPlacement
GetMessageA
GetWindowContextHelpId
GetParent
GetPropW
SetFocus
DeferWindowPos
GetWindow
LoadAcceleratorsA
GetDesktopWindow
CharToOemW
comdlg32
ChooseFontW
PageSetupDlgW
comctl32
PropertySheetW
PropertySheetA
gdi32
CreateHalftonePalette
TextOutA
SetTextColor
GetCurrentObject
ExtFloodFill
shlwapi
PathRemoveFileSpecW
PathCommonPrefixW
PathCanonicalizeW
ord155
StrCSpnIA
kernel32
HeapSize
AddAtomW
lstrcpynA
ExitProcess
WriteFile
GetTempPathW
ntdll
memset
Exports
Exports
?WDVkbuoftafXzeae@@YGDF@Z
Sections
.text Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ