Static task
static1
Behavioral task
behavioral1
Sample
ba44caff8e76d8b3468c92b9e464471c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba44caff8e76d8b3468c92b9e464471c.exe
Resource
win10v2004-20240226-en
General
-
Target
ba44caff8e76d8b3468c92b9e464471c
-
Size
512KB
-
MD5
ba44caff8e76d8b3468c92b9e464471c
-
SHA1
c72327684a12401dc4b082f4e530b82344f0c5f2
-
SHA256
8afb6d910bb88ad38103b86c4cc0758be869bb42d02bd4a6350f5ece89195dd6
-
SHA512
4b5bffef87dd760e992fd1a93dc8dbf60cb9e496f5510ebe49e13bcd911b51a8fde27d945d8031bb68e7305596ebaebf80645597deaf6b1b28529a2bf005d9aa
-
SSDEEP
12288:DJYw2vpWJtkQ02RhpAPvV/c4MHoJBmv3cHjafGWAtn:DgvpekQPhinVLMHDv3eja+tn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba44caff8e76d8b3468c92b9e464471c
Files
-
ba44caff8e76d8b3468c92b9e464471c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 803KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 183B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE