Static task
static1
Behavioral task
behavioral1
Sample
ba644c3712040532e7417c6fb9179bbf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba644c3712040532e7417c6fb9179bbf.exe
Resource
win10v2004-20240226-en
General
-
Target
ba644c3712040532e7417c6fb9179bbf
-
Size
110KB
-
MD5
ba644c3712040532e7417c6fb9179bbf
-
SHA1
8cd9002c255c59d6a7b0b52dfa22e87b935a5320
-
SHA256
9e249b7e8bc5f7e0a7c28a81c84feec1f6b9abc5cab008ce7c390db19a87b4b6
-
SHA512
a693b134c710cfd37cee645b91d46676344cc89094416e37c2ded1f148573a8b33abb02d7368c25b66ca81db9cf5a728a763ea9611dc07f04c2c8f2163c69395
-
SSDEEP
3072:4Ucdb+mJC0Heet000Cquz2asOD738n4N71mdBId2xwE:4UcdbG0H/JqGDsk38n4+B6E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba644c3712040532e7417c6fb9179bbf
Files
-
ba644c3712040532e7417c6fb9179bbf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
wfq Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upu Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kq Size: 302B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE