Static task
static1
Behavioral task
behavioral1
Sample
ba61399ba2b51cbaf21687dceca9570f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ba61399ba2b51cbaf21687dceca9570f.exe
Resource
win10v2004-20240226-en
General
-
Target
ba61399ba2b51cbaf21687dceca9570f
-
Size
716KB
-
MD5
ba61399ba2b51cbaf21687dceca9570f
-
SHA1
ac08c0fef830562ff3d7f4a727ce04139d48e172
-
SHA256
15c675081668a4222bbd8fee164e152afb1f268e954ed1689977c5de15960322
-
SHA512
d949200d49f5e8fef423fd83cd4bb85070c5c156584f7e977f4729d65f5b032c2469c98a14ee560387739786f281410e6098af8515722f4d47d866124a7651ac
-
SSDEEP
12288:unWWxehFsKabZza2LNEi6xGk9lsDPymMHhiLRRiqWu94yCVjvRXLmVBvCZWrF0bG:undZDFz7V6xGHTMHhiLwF/vlW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba61399ba2b51cbaf21687dceca9570f
Files
-
ba61399ba2b51cbaf21687dceca9570f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
,CIhVY Size: 607KB - Virtual size: 607KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ