Static task
static1
Behavioral task
behavioral1
Sample
ba9fab5a7fb941eeed4186cfec8f1fda.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba9fab5a7fb941eeed4186cfec8f1fda.exe
Resource
win10v2004-20240226-en
General
-
Target
ba9fab5a7fb941eeed4186cfec8f1fda
-
Size
228KB
-
MD5
ba9fab5a7fb941eeed4186cfec8f1fda
-
SHA1
e0550b4de0a45ad1f9973eeab7243b362985dfcc
-
SHA256
763c370632f8b2f0c006855eafd8eeee9a7e36d35c504bf2c269daff93be1ce7
-
SHA512
a544977c947beb99050f69e45edfcdca6950b16e16ba16e8a432aecec627a9bfddad013499a2b4c02c15d0579fc6f22a1926548ae522c0496d8004cefc98dac7
-
SSDEEP
6144:ezaq8u14YHNF3Zz1MkdIV7Z5jcN5PZiR0B:i8KF3N2ki7Z58IU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba9fab5a7fb941eeed4186cfec8f1fda
Files
-
ba9fab5a7fb941eeed4186cfec8f1fda.exe windows:4 windows x86 arch:x86
748a271b7a15bf88ba7466308d14b8b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFindExtensionA
PathFindFileNameA
PathFileExistsA
SHDeleteValueA
wininet
InternetReadFile
winmm
timeSetEvent
timeKillEvent
kernel32
GetThreadLocale
GetCurrentProcess
CreateFileA
GetCPInfo
GetOEMCP
SetErrorMode
HeapAlloc
HeapFree
VirtualAlloc
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetFilePointer
ReadFile
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
WritePrivateProfileStringA
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalFree
GlobalUnlock
FormatMessageA
LocalFree
GetCurrentProcessId
SetLastError
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
CompareStringA
MultiByteToWideChar
InterlockedExchange
GetVersion
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
Sleep
CloseHandle
ExitProcess
lstrcmpA
CreateMutexA
GetLastError
LoadLibraryA
GetProcAddress
WriteFile
GetModuleHandleA
RaiseException
user32
UnregisterClassA
DestroyMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
ClientToScreen
ShowWindow
SetWindowTextA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetWindowTextA
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetMessageA
DispatchMessageA
CreateWindowExA
TranslateMessage
PostQuitMessage
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
DefWindowProcA
MessageBoxA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
SendMessageA
GetParent
GetFocus
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
PostMessageA
ValidateRect
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
SetWindowsHookExA
CallNextHookEx
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
GetClassInfoExA
gdi32
DeleteDC
GetStockObject
SetViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
ScaleViewportExtEx
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ