Static task
static1
Behavioral task
behavioral1
Sample
baf6cca2e2c24c138af6632888d2c062.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
baf6cca2e2c24c138af6632888d2c062.exe
Resource
win10v2004-20240226-en
General
-
Target
baf6cca2e2c24c138af6632888d2c062
-
Size
136KB
-
MD5
baf6cca2e2c24c138af6632888d2c062
-
SHA1
0123026616a1e6da9b9b942e2153ab2805e64299
-
SHA256
b95e67c401b2591d8e8accfe5bc23606e4898614cbceb17af159549d235b7af5
-
SHA512
7e8e291fad689afd02f19a49318089c6877395b3e3914237630937b26066b67dc6dd4915f1676331e7881e6f457e63d81a2f00f5f17c8507dc2c63bffb01e997
-
SSDEEP
3072:Ib4bp46ejI5o45ATPCRS1cb6Bk4sq7pW5pUY:x94NJPSS106O4sw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baf6cca2e2c24c138af6632888d2c062
Files
-
baf6cca2e2c24c138af6632888d2c062.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
p Size: 4KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pvwidm Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2l9k Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE