Static task
static1
Behavioral task
behavioral1
Sample
ba4bfd6e3c9ec61fbf9a6af6ccb2d43f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ba4bfd6e3c9ec61fbf9a6af6ccb2d43f.exe
Resource
win10v2004-20240226-en
General
-
Target
ba4bfd6e3c9ec61fbf9a6af6ccb2d43f
-
Size
395KB
-
MD5
ba4bfd6e3c9ec61fbf9a6af6ccb2d43f
-
SHA1
751d473b290f71d1ba59c3c674648039b05a4404
-
SHA256
2d44c59ab1494f35429b102fc2626aa51e71d7e0cb84ad7e6f4ffd50c154b486
-
SHA512
8273770282289dab0f357ed2187dddb39d3727021977dba0725cfa970eb1eac26fd95224d9aac312685281b5f2507e31a853fbd4f2cd8cad19a8e1f16c6d73a8
-
SSDEEP
6144:jUIHEA9AOn4vIIDUjcteoa2Cd1ms3/11GGKaxXZ2nngY3DFI/MtKU5:oIHEA9ALpwk0/1oQxXZgDF4Mt75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4bfd6e3c9ec61fbf9a6af6ccb2d43f
Files
-
ba4bfd6e3c9ec61fbf9a6af6ccb2d43f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE