Static task
static1
Behavioral task
behavioral1
Sample
ba7153b8248e414e413edd933e92080e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba7153b8248e414e413edd933e92080e.exe
Resource
win10v2004-20240226-en
General
-
Target
ba7153b8248e414e413edd933e92080e
-
Size
72KB
-
MD5
ba7153b8248e414e413edd933e92080e
-
SHA1
16c1bd2d84b0b6069f9110fb631d68b3b66a5c11
-
SHA256
230a3bdf65b5a2ab6a747145338b821986feac106666630073fa09e84c28e73c
-
SHA512
44fe2c98fae428a72f8e42abae91466cffb916380392eb5a041f1d3eb2238612969e65312f6b6b053c49819b0f5c23fbac17f4e0dfd423f8b3f88f0847c0a776
-
SSDEEP
768:+7pZbAozWXuQNiFy35LZJ9oekodHKWynJWAEE+e80MY1n:+7pKozOtNL5L+nodHzyYAEETMY1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba7153b8248e414e413edd933e92080e
Files
-
ba7153b8248e414e413edd933e92080e.exe windows:4 windows x86 arch:x86
23a20525f909029537a00b516eca5580
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetFileSize
GetShortPathNameA
CopyFileA
CreateFileA
WriteFile
GetFileType
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetVersion
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetFilePointer
GetCurrentProcess
TerminateProcess
GlobalAlloc
ReadFile
CloseHandle
ExitProcess
SetEndOfFile
GlobalFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
user32
SetWindowTextA
SendMessageA
LoadIconA
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
UpdateWindow
ShowWindow
CreateDialogParamA
wsprintfA
GetDlgItem
GetDC
GetWindowRect
SetWindowLongA
GetCursorPos
GetSystemMetrics
LoadBitmapA
SendDlgItemMessageA
GetSystemMenu
EnableMenuItem
AppendMenuA
PostQuitMessage
BeginPaint
GetClientRect
FillRect
FrameRect
EndPaint
ReleaseDC
MessageBoxA
gdi32
DeleteObject
TextOutA
SetTextColor
GetTextExtentPoint32A
SelectObject
CreateBrushIndirect
CreateFontA
SetBkMode
comdlg32
GetOpenFileNameA
advapi32
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
comctl32
ord6
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE