Static task
static1
Behavioral task
behavioral1
Sample
ba5e120b64d88a8a27ee41a45ed5bab9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba5e120b64d88a8a27ee41a45ed5bab9.exe
Resource
win10v2004-20240226-en
General
-
Target
ba5e120b64d88a8a27ee41a45ed5bab9
-
Size
91KB
-
MD5
ba5e120b64d88a8a27ee41a45ed5bab9
-
SHA1
9b2e4962572a0067db68a10e2c537f743683d547
-
SHA256
5db15b605f6fef05c5ff16a5a293ee2d633dabbc9608e062213805ddd7e5428d
-
SHA512
b846a8b015c28ed942be3e8ca6b9596eb96c8391ba6606384e6e60397ccff8ab634e11129a35deecc00ad734a1bf3b04ddcd076dd0a3703305b0df2e1d88d06b
-
SSDEEP
1536:/48MMDo0GsIQFa/lrmsJsi8RbqTapBzCtiQNhDZ6gvZlG4S5x3K4FvRCDZYP5SJO:Q8MF8axJf8FqupBuThcFKEoDuRST8SC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba5e120b64d88a8a27ee41a45ed5bab9
Files
-
ba5e120b64d88a8a27ee41a45ed5bab9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ