Static task
static1
Behavioral task
behavioral1
Sample
ba205fcd72a7094ef1ef79bc4783b68c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba205fcd72a7094ef1ef79bc4783b68c.exe
Resource
win10v2004-20240226-en
General
-
Target
ba205fcd72a7094ef1ef79bc4783b68c
-
Size
512KB
-
MD5
ba205fcd72a7094ef1ef79bc4783b68c
-
SHA1
3d39a35200d69adb263562c3f3e7defaac79198f
-
SHA256
92b803a469868de4f7ffc9046ed16f61655efb739fa0a830b36246a655f4bb30
-
SHA512
4265993f5462cbf98725212cface1e74eb93363ec8951424c4c7d8591ed8e31dd7e5dffb951bd29b599f85fdc9f48affbaae7a45e89ecf620ebb342ae2c47d20
-
SSDEEP
12288:6pKprtZwOxSWi2I4bqhBX1DpqnQDfHGvVxxeLl1:aKRwOxNXLqjlDwnQD/GvVOj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba205fcd72a7094ef1ef79bc4783b68c
Files
-
ba205fcd72a7094ef1ef79bc4783b68c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 805KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 331B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE