Static task
static1
Behavioral task
behavioral1
Sample
ba52f6be3a8155f379db73ebdb881d42.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba52f6be3a8155f379db73ebdb881d42.exe
Resource
win10v2004-20231215-en
General
-
Target
ba52f6be3a8155f379db73ebdb881d42
-
Size
648KB
-
MD5
ba52f6be3a8155f379db73ebdb881d42
-
SHA1
882c95f1af91cbc857930f747d4c41f5d99a048e
-
SHA256
769b583dda91cd7603a21900b7b3c7b656dc8c47e80eaea506dae696285b46ba
-
SHA512
50aeded82b09ea02f414006a7da32995e9ae07d0f0610e357ab354213879624b317db0d7f7d3138ebdc660fd5f3fd54875b154c045325447e01c94c20044bc15
-
SSDEEP
3072:1draBIpPQMPozgEAQIIOa1GzjtYgEAQIIOraBIpPQMPo:fraBCDorABa1aiAdraBCDo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba52f6be3a8155f379db73ebdb881d42
Files
-
ba52f6be3a8155f379db73ebdb881d42.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 556KB - Virtual size: 553KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ