Static task
static1
General
-
Target
BAV.exe
-
Size
72KB
-
MD5
a87998e905ce3f02f29349c7b355bca2
-
SHA1
955a5aaf4b1cfbea4d35d85772c936b46850245c
-
SHA256
40667579aa14c25145b7ba876e7e1599b56b7e509aaf0db4db995b0a5e392cd8
-
SHA512
c7607c60cfc8ac5d324841e7ccee90e15a54dabc606b9b9f18cd327e4a222b96e19d048764b17f4a387b5fe271c861cbe944f96238710a7c763bfc8aca0705ee
-
SSDEEP
1536:r9zpS408FJRi9v6dYhfNUEwuZht+kfdNEKqhJ7k12kQxR:hz9RFnYvtQu/t+kfdOxsR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BAV.exe
Files
-
BAV.exe.exe windows:6 windows x64 arch:x64
003ccc0c486fadb15eb8b2a6f0a742bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryA
SetCriticalSectionSpinCount
MultiByteToWideChar
ConvertDefaultLocale
lstrlenA
user32
RegisterClassW
IsWindowVisible
GetWindowContextHelpId
MessageBoxA
GetWindowLongPtrW
IsDialogMessageW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ