Static task
static1
Behavioral task
behavioral1
Sample
ba47417fb98071af9e171af34a16d19f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba47417fb98071af9e171af34a16d19f.exe
Resource
win10v2004-20240226-en
General
-
Target
ba47417fb98071af9e171af34a16d19f
-
Size
127KB
-
MD5
ba47417fb98071af9e171af34a16d19f
-
SHA1
22ab40b0d68cc72aef1ad2457af212ac22f46096
-
SHA256
5022241c31f7d9039742755d55bd65b63653e384b12c7926dc2e6a912aec2c2e
-
SHA512
1a4adbe155cbe7eefcf46167760d58534235fa4506ed6ad00fb72706e6e8a03249379b42cfb15c44a4f092ed4b4990c80432ab8e71ca65f7c6d1c1497d1ca38d
-
SSDEEP
3072:2QnKFHLdgEYK0xw9C/EJZSbABEcuyUoQIetNWSQXR:2WYHLdgEMxOIEmABEcpUFI0bs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba47417fb98071af9e171af34a16d19f
Files
-
ba47417fb98071af9e171af34a16d19f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
mw5 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cau4r Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE