Static task
static1
Behavioral task
behavioral1
Sample
ba2566421e1bbd588fde5f1b2fd1cd6b.exe
Resource
win7-20240221-en
General
-
Target
ba2566421e1bbd588fde5f1b2fd1cd6b
-
Size
1.1MB
-
MD5
ba2566421e1bbd588fde5f1b2fd1cd6b
-
SHA1
cdb1445f4e54208830b2dfcf9670e0775841c4ae
-
SHA256
58bb301a992cfaccdb72766d44d0a51f7d09877a55c5a1bc190619c2c44cc5ed
-
SHA512
9a6d44257c78ad0215a1a9b15b823b8d6f582a4cdee165daef26d1f37b9f290bca6e3101fce7e1f1f7a886e7df28e333af0d0a27092e131d55aa198d8d856aab
-
SSDEEP
24576:DCTf8loQFESz2KRREhu4RErGVAwMRFDRP8m6S6otpeUk+yfZ:DCTf8lLT2KRJ4ErAAhRFx8m6tonevTfZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba2566421e1bbd588fde5f1b2fd1cd6b
Files
-
ba2566421e1bbd588fde5f1b2fd1cd6b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 175KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 907KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE