Static task
static1
Behavioral task
behavioral1
Sample
ba9e117b0543b12caa7420b6ff43d3094ccbe34e49381cae3b0514ba8e3eb9d5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba9e117b0543b12caa7420b6ff43d3094ccbe34e49381cae3b0514ba8e3eb9d5.exe
Resource
win10v2004-20240226-en
General
-
Target
ba9e117b0543b12caa7420b6ff43d3094ccbe34e49381cae3b0514ba8e3eb9d5
-
Size
927KB
-
MD5
29349230d9d0227d33d737b6f9d346b5
-
SHA1
9d036a31e25b4e9825db7efa6b222065979e3456
-
SHA256
ba9e117b0543b12caa7420b6ff43d3094ccbe34e49381cae3b0514ba8e3eb9d5
-
SHA512
4f011f3c31a6490ff4079b4d36a8b4898b9079c1c91629c6eed5b793fd92b89537a6dfd7b8ddb19f5ae0318a5a8e1a754adafc218e621d3cadf52e241a59448d
-
SSDEEP
24576:WbX+tZe0p4Ek4niOkl/A04szE87JKTvmn:WbX+PeW4SkZP4sz9Mbo
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba9e117b0543b12caa7420b6ff43d3094ccbe34e49381cae3b0514ba8e3eb9d5
Files
-
ba9e117b0543b12caa7420b6ff43d3094ccbe34e49381cae3b0514ba8e3eb9d5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE