Static task
static1
Behavioral task
behavioral1
Sample
ba7c019ac594c08a0a7ecb533ca5ba62.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba7c019ac594c08a0a7ecb533ca5ba62.dll
Resource
win10v2004-20240226-en
General
-
Target
ba7c019ac594c08a0a7ecb533ca5ba62
-
Size
18KB
-
MD5
ba7c019ac594c08a0a7ecb533ca5ba62
-
SHA1
a495623f328a68da3ba636e70740b43397607818
-
SHA256
33c5ac119bef30fc590a23766add732838ad23400834d9e35d571b913d4cd22e
-
SHA512
9e4ff415cbae4018e10cf347cebe0ea3114788856d5c1a1e4c270c1bb72666b4a7b91893941926c7eab83be7755195ba35577e8176062f5c1d9adb3bacc062a5
-
SSDEEP
384:9fJCpLosfxyXUfxyXUZ2xyXUZ2xyXUZ2xyXU2xyXUyxyXOxyXIZZoXZxyXIZZO:9frXFXeXeXeXeXUXrXIE2XIy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba7c019ac594c08a0a7ecb533ca5ba62
Files
-
ba7c019ac594c08a0a7ecb533ca5ba62.dll windows:4 windows x86 arch:x86
2ab4d3bcb802f2de3449333a8953ae8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetProcessHeap
CreateThread
GetModuleFileNameA
SetFilePointer
ReadFile
GetTickCount
GetWindowsDirectoryA
lstrcpyA
lstrlenA
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
HeapFree
HeapAlloc
CloseHandle
CreateFileA
WriteFile
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
shell32
ShellExecuteA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 96B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ