Static task
static1
Behavioral task
behavioral1
Sample
babb76d74e4cd4ff16f98f7ef1d6c1d8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
babb76d74e4cd4ff16f98f7ef1d6c1d8.exe
Resource
win10v2004-20240226-en
General
-
Target
babb76d74e4cd4ff16f98f7ef1d6c1d8
-
Size
23KB
-
MD5
babb76d74e4cd4ff16f98f7ef1d6c1d8
-
SHA1
0460e6125322e865b06f233e3501e6913570de12
-
SHA256
31dc4aa49621c16f304aa60a5fc08e1ff870e9bd5304a6e9bbe3e67126b8399b
-
SHA512
d72d18e80a6ad8d116de6ef5fc3a7902959f5ae1a201cbe0dc77852b0f12e345e36fb4b783560862d6446aea35ea49f14d577779afb44e98275d5a205f4ae51a
-
SSDEEP
384:GHzEmgPeEXZ5VBVLcbLfOwMjSgvdQjQxhW5VNX+1P1A824n053wc9oI:2ylyHHMjnvikSVNXq9S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource babb76d74e4cd4ff16f98f7ef1d6c1d8
Files
-
babb76d74e4cd4ff16f98f7ef1d6c1d8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE