Static task
static1
Behavioral task
behavioral1
Sample
baf8f8ddef48957584c27029688641f00e612dbfe652b1a1c1ebcdce06a32364.exe
Resource
win7-20240221-en
General
-
Target
baf8f8ddef48957584c27029688641f00e612dbfe652b1a1c1ebcdce06a32364
-
Size
392KB
-
MD5
3a89e88dab76b17de9511580bbd5ec65
-
SHA1
101ac3c70e6f3ea8eec4f579952afed84ff40814
-
SHA256
baf8f8ddef48957584c27029688641f00e612dbfe652b1a1c1ebcdce06a32364
-
SHA512
04c578e96027d11a58745b5002cd9643172d4fcd89af236d7325be9dd7e3eacccf8f1ec0aef92c42e9aa7439db3e3c0f7107582440023e7ca32a9905c590cf9c
-
SSDEEP
6144:n3C9BRo7tvnJ9oH0IRgZvjkIfzBgZJmAh0:n3C9ytvngQj1fz6ZJmAS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baf8f8ddef48957584c27029688641f00e612dbfe652b1a1c1ebcdce06a32364
Files
-
baf8f8ddef48957584c27029688641f00e612dbfe652b1a1c1ebcdce06a32364.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ