Static task
static1
Behavioral task
behavioral1
Sample
ba2e41e74016abc5d3613b2ccaec43bf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba2e41e74016abc5d3613b2ccaec43bf.exe
Resource
win10v2004-20240226-en
General
-
Target
ba2e41e74016abc5d3613b2ccaec43bf
-
Size
470KB
-
MD5
ba2e41e74016abc5d3613b2ccaec43bf
-
SHA1
ee12aa462fd8124988885489f10bd25aed5f24c9
-
SHA256
ec4dc97c695923bc7fa00e162cfad3693eeb1277233c70b37235fe567fb219f1
-
SHA512
38c6cb96974bac668374ea28a4f1bd11eb61dc1abb92730ef2b5511bc3ef1ee7f3972377f4d71efaadc84ca4ba4978abceec7855f44170c1cd86b5678902b72a
-
SSDEEP
12288:WpzBRujF68q1l7tOhduoh7NuE/RYrEAwfSP:ARcA8qL0hX7dZYAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba2e41e74016abc5d3613b2ccaec43bf
Files
-
ba2e41e74016abc5d3613b2ccaec43bf.exe windows:4 windows x86 arch:x86
d5f2d8849813a4009dd8b330de1b3bde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DefWindowProcA
oleaut32
VariantChangeTypeEx
Sections
Size: 438KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE