Static task
static1
Behavioral task
behavioral1
Sample
ba05a9ad5248eb65248753f113a467d14cef6cbf7417d359d5b14fd4b67aca64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba05a9ad5248eb65248753f113a467d14cef6cbf7417d359d5b14fd4b67aca64.exe
Resource
win10v2004-20240508-en
General
-
Target
ba05a9ad5248eb65248753f113a467d14cef6cbf7417d359d5b14fd4b67aca64
-
Size
14KB
-
MD5
e0c41f84e8e237cdc0792c0fb8f6508e
-
SHA1
478271a20040f603f600f6cddb8881d199ead2b4
-
SHA256
ba05a9ad5248eb65248753f113a467d14cef6cbf7417d359d5b14fd4b67aca64
-
SHA512
070900462f91fd9a4a920f54537b83829b56c510096a1db37f450e7ac542ab28377d58ae509a4baa6ff7fca1efb88b77f794195252afabec4e5c1bb409992030
-
SSDEEP
384:bx2V0f2gLaDdvdKkkBF6QkQSkkY15DE045HAJJJJ:PiRUHv6NQSkDZASJJJJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba05a9ad5248eb65248753f113a467d14cef6cbf7417d359d5b14fd4b67aca64
Files
-
ba05a9ad5248eb65248753f113a467d14cef6cbf7417d359d5b14fd4b67aca64.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ