Static task
static1
Behavioral task
behavioral1
Sample
baed3257c9195ed8f1e3bfbfef899fad.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
baed3257c9195ed8f1e3bfbfef899fad.exe
Resource
win10v2004-20240226-en
General
-
Target
baed3257c9195ed8f1e3bfbfef899fad
-
Size
105KB
-
MD5
baed3257c9195ed8f1e3bfbfef899fad
-
SHA1
4520f87091c2197d584eaf6a7824fb0a64ca4030
-
SHA256
65cbdeea8eb2a6c30e98039f6dfb17336dd0ac3796a69edecdc400bb8f2c279d
-
SHA512
dba0851b15f0b1d95e0214b0872661b60ed6d99b40140765127c874087eb19ab60867f5e559afb78f842c16569196fb787340faa7e4a546fdf48ab19e94148ba
-
SSDEEP
1536:yhZQy9853vHIa3b7TIihL2LGLYY9+2KY2R137BVKvRFOrja/cBCGTA:yhZM3/I87zL2AN8DYa1H1rWsCGTA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baed3257c9195ed8f1e3bfbfef899fad
Files
-
baed3257c9195ed8f1e3bfbfef899fad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
guw Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lfs Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dx Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE