Static task
static1
Behavioral task
behavioral1
Sample
ba61d9c62374269dfd7184493a5ef1f28eb6d2a4ab15a14c7289c564dde3aa8f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ba61d9c62374269dfd7184493a5ef1f28eb6d2a4ab15a14c7289c564dde3aa8f.exe
Resource
win10v2004-20240508-en
General
-
Target
ba61d9c62374269dfd7184493a5ef1f28eb6d2a4ab15a14c7289c564dde3aa8f
-
Size
14KB
-
MD5
b194a0e1af3d5b31c5491a78ef24b109
-
SHA1
02e3fac2eab18598356bdd83516254526313c6d4
-
SHA256
ba61d9c62374269dfd7184493a5ef1f28eb6d2a4ab15a14c7289c564dde3aa8f
-
SHA512
dcec91e8ddeabd504acd8805256adc428b745184bce619955d994ea0f817e0de4eb806d80609f9aa43b278eb55de30a2e5d36fbca9848cabd1d262cb7584368b
-
SSDEEP
384:0vfQs6zR2xcj/OS1rr9/rODE045Hvgccc:03z6N2xq/3rZoA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba61d9c62374269dfd7184493a5ef1f28eb6d2a4ab15a14c7289c564dde3aa8f
Files
-
ba61d9c62374269dfd7184493a5ef1f28eb6d2a4ab15a14c7289c564dde3aa8f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ