Static task
static1
Behavioral task
behavioral1
Sample
ba5a57592ce69590fa062b8dd29e97781d355de90ba519302d861ff52f9bea11.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ba5a57592ce69590fa062b8dd29e97781d355de90ba519302d861ff52f9bea11.exe
Resource
win10v2004-20240226-en
General
-
Target
ba5a57592ce69590fa062b8dd29e97781d355de90ba519302d861ff52f9bea11
-
Size
32KB
-
MD5
7ab924e8ca2efaec21b37f2a2ec3f6d5
-
SHA1
4838335f80b1662aa991a18a3a35a8d3b7e79849
-
SHA256
ba5a57592ce69590fa062b8dd29e97781d355de90ba519302d861ff52f9bea11
-
SHA512
1043b23be82663b05362c7464e839eccf0513f27815886fe5d209fc89b00ca59e6dc951805df680203feda69c82172fb8023523440e296d623d0ab3e8bc2159a
-
SSDEEP
384:6etm4tSqv/N5oVWqWOnyz13vMBAaM/ScevNP+THWyJ664y:VmDq30VWie13vMBpceFP+THyVy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba5a57592ce69590fa062b8dd29e97781d355de90ba519302d861ff52f9bea11
Files
-
ba5a57592ce69590fa062b8dd29e97781d355de90ba519302d861ff52f9bea11.exe windows:4 windows x86 arch:x86
6cfe3038c8cb39d0bb2ec20c7e3b6863
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetTempPathA
DeleteFileA
CreateProcessA
WaitForSingleObject
SetEvent
GetModuleFileNameA
CreateEventA
GetModuleHandleA
user32
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
PostQuitMessage
GetMessageA
PostMessageA
DefWindowProcA
DispatchMessageA
TranslateMessage
gdi32
GetStockObject
advapi32
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
ole32
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
SysAllocString
VariantClear
msvcp60
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
rpcrt4
UuidToStringA
msvcrt
ftell
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
free
strrchr
strchr
_mbsnbcmp
_mbsnbcpy
_mbscmp
atol
_CxxThrowException
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
_beginthreadex
fwrite
fread
_controlfp
fseek
fopen
fclose
strncpy
strstr
_vsnprintf
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE