D:\InfoFolderData\WindowsInternalFile
Static task
static1
Behavioral task
behavioral1
Sample
bae8e1d4cadf47cfe4290c4ee7fe5cce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bae8e1d4cadf47cfe4290c4ee7fe5cce.exe
Resource
win10v2004-20240226-en
General
-
Target
bae8e1d4cadf47cfe4290c4ee7fe5cce
-
Size
169KB
-
MD5
bae8e1d4cadf47cfe4290c4ee7fe5cce
-
SHA1
29ac6838fa81aff21c7c0a7ed6e7cfccdce86859
-
SHA256
58b8644f12251eb8466651018182748053f6cfb34c41129c1fb9af0caeae35a4
-
SHA512
d64f4ebae636756f03158d0f5b63649b69c705f61b4d43394090d247f5b963d2c07978e9f5ddafd268b2241ab8df1cfc1b5f9b8a80887efd5cb384e5aaa55aa8
-
SSDEEP
3072:B3z6lCEDS7MwSTW7/IuNXs/Y8rOpKHAwonbL6K7Sw0JlDmp2evYOmHL5:F6oEGMxq7/nsJrYKHSb/7ZIZmHwF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bae8e1d4cadf47cfe4290c4ee7fe5cce
Files
-
bae8e1d4cadf47cfe4290c4ee7fe5cce.exe windows:5 windows x86 arch:x86
628c9a1b4cbf6f68b802f31223b7bca7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
RectVisible
GetDIBits
EnumFontFamiliesW
GetPaletteEntries
GetROP2
PatBlt
BeginPath
CreatePalette
Rectangle
CreateDIBSection
GetCharWidth32W
kernel32
BuildCommDCBA
GetFileAttributesExW
OpenFileMappingW
GetCurrentDirectoryA
VerifyVersionInfoW
SetMailslotInfo
OpenFileMappingA
LocalReAlloc
SuspendThread
CreateFileW
GetFileSize
FlushViewOfFile
GetLocaleInfoW
SetPriorityClass
SearchPathW
SetThreadAffinityMask
Exports
Exports
?GetMessageGetMess
Sections
.text Size: 127KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewrd Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewrdf Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cvbb Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cxdzb Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lityf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lugvf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewref Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bnbvn Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.errgy Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mcdeo Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rtre Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vcnhb Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ