Static task
static1
Behavioral task
behavioral1
Sample
ba3f4a20d91f6a64a33b796ab72e40ce.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ba3f4a20d91f6a64a33b796ab72e40ce.exe
Resource
win10v2004-20231215-en
General
-
Target
ba3f4a20d91f6a64a33b796ab72e40ce
-
Size
10KB
-
MD5
ba3f4a20d91f6a64a33b796ab72e40ce
-
SHA1
a7c9748c86aecab74c77e8dc3cb01f06e492c957
-
SHA256
71fde816c3bc932a67d5a437a118c8bbf15dd5c4f33134e494bf86cf4bdc19a1
-
SHA512
01506e2baf73e1e2ddd406083b361df5f17abeb34339deb7e972023e79d1f76684ead74ae9a3db36d8e8895b511d1e6a337acfff78091a4d654b990f0615231a
-
SSDEEP
192:Dzotg1JZlf7FnBP/PcLqBz3lUpEb1ShIeqFjjDM6ArdVf3CYrk9Q+L3y:ffJZlf7dBvc41Ua0IeyDMjX1qQE3y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba3f4a20d91f6a64a33b796ab72e40ce
Files
-
ba3f4a20d91f6a64a33b796ab72e40ce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 116KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ