Static task
static1
Behavioral task
behavioral1
Sample
ba595a9f69fbfcc4b2ecf12caa29eea8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ba595a9f69fbfcc4b2ecf12caa29eea8.exe
Resource
win10v2004-20240226-en
General
-
Target
ba595a9f69fbfcc4b2ecf12caa29eea8
-
Size
275KB
-
MD5
ba595a9f69fbfcc4b2ecf12caa29eea8
-
SHA1
9a3ae943a45e43d808c780dd9e33df6da4078591
-
SHA256
f0fd95015070fd55576f9016d46d341401ac224c011daf93ef09d4f735c23865
-
SHA512
e0393063560a49c24addd4818401d16fdc126ee82077c50710cf835312c8faeff2f9f390d423aa00e67272c99b157336c112134748133f96dde8e0e8de044270
-
SSDEEP
6144:tKTmVvNzDkmU3jxWUAPWEOocft5sDL22hjWngufXxi8vWKBy4CtesQ:ta4z4x5evcft5YLdjgvXs8uKBOteX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba595a9f69fbfcc4b2ecf12caa29eea8
Files
-
ba595a9f69fbfcc4b2ecf12caa29eea8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE