Static task
static1
Behavioral task
behavioral1
Sample
ba8acb7788922be9d3dff7f3ff20f0a3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba8acb7788922be9d3dff7f3ff20f0a3.exe
Resource
win10v2004-20240226-en
General
-
Target
ba8acb7788922be9d3dff7f3ff20f0a3
-
Size
46KB
-
MD5
ba8acb7788922be9d3dff7f3ff20f0a3
-
SHA1
a234b623e11c9aa47f9156a759ac71be7d2a1022
-
SHA256
65733ad1768519c0ce55d0b6565df796416c98cb94105c81a9b56d29ef31123b
-
SHA512
3149784bf7b0d2fa4d920b2fbe5f087eb8c6e65730aaeb8a025e5c4701ed3e64edf0d4e173db0e217a9a46b1917dacff1d5f0bc67d3096c00f7a8f3bcdf83663
-
SSDEEP
768:4KMjaSX3LMQZDHrbiC0ovX4aThaI2Eoxwc3F8eda6k8DoOHB3ea4LJuH9/8fkao2:M2ALnJHC4/RgI2EoxT1Vg6YO0aEo9iY2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba8acb7788922be9d3dff7f3ff20f0a3
Files
-
ba8acb7788922be9d3dff7f3ff20f0a3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 906B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE