Static task
static1
Behavioral task
behavioral1
Sample
ba5565ae3c8fd1eb83554ba7d00cb2c0.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ba5565ae3c8fd1eb83554ba7d00cb2c0.exe
Resource
win10v2004-20240226-en
General
-
Target
ba5565ae3c8fd1eb83554ba7d00cb2c0
-
Size
360KB
-
MD5
ba5565ae3c8fd1eb83554ba7d00cb2c0
-
SHA1
9357aef42a7f71eb7fc15c0de60538f37fb5bb47
-
SHA256
b89e10f091b53bd118febda9fce5fd6ba2814a2355502f921e992868295311d3
-
SHA512
03745aadca55b148cff082a8911e027b3265697aba6c4e12b845e3ad9c6cf9536668cd66c6b6613b1759ec6fd90e6054f7df001ec1099f18beaaaefe0cce8abc
-
SSDEEP
6144:3BBEmTcV9oz8uNN7is8DQmcBPKxrviEwKcxmYLfCSPF0I91BbB9uWZ:3Qm4V9KX7iRDQmcCx2KIdT0I91B9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba5565ae3c8fd1eb83554ba7d00cb2c0
Files
-
ba5565ae3c8fd1eb83554ba7d00cb2c0.exe windows:4 windows x86 arch:x86
bc563a9dd6da6b8f04ded4ed5627527e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
gdi32
SelectObject
CreateFontIndirectA
DeleteObject
GetDeviceCaps
DeleteDC
CreateSolidBrush
kernel32
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
FlushFileBuffers
GetStdHandle
GetOEMCP
VirtualAlloc
Sleep
VirtualFree
FindResourceW
HeapCreate
IsValidCodePage
GetEnvironmentStrings
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
lstrlenW
LockResource
GetCurrentProcessId
SizeofResource
FileTimeToLocalFileTime
GetModuleFileNameA
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GlobalFree
lstrlenA
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateFileW
GetTimeZoneInformation
GlobalLock
FindFirstFileW
CreateFileMappingA
CompareStringA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
GetFullPathNameA
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GetConsoleMode
GlobalAlloc
GetVersion
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
LoadLibraryExA
RemoveDirectoryA
GetConsoleOutputCP
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetCommandLineW
GetFileAttributesW
HeapDestroy
FindNextFileA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
user32
LoadIconA
LoadCursorA
DefWindowProcA
ScreenToClient
GetDlgItem
SetTimer
SetWindowTextA
SetWindowLongA
ReleaseCapture
PostMessageA
GetWindowRect
GetSystemMetrics
BeginPaint
SetFocus
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
IsWindowEnabled
TranslateMessage
SetWindowPos
SetCapture
ShowWindow
UpdateWindow
GetParent
DestroyWindow
GetClientRect
ReleaseDC
GetCursorPos
GetDC
DispatchMessageA
PostQuitMessage
TrackPopupMenu
GetDesktopWindow
EndDialog
SetDlgItemTextA
MessageBoxA
GetSysColor
IsWindowVisible
GetFocus
InvalidateRect
SendMessageA
CallWindowProcA
SetCursor
msvcrt
__dllonexit
_onexit
_except_handler3
_strcmpi
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
exit
_exit
_controlfp
Sections
.text Size: 344KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ