Static task
static1
Behavioral task
behavioral1
Sample
babdb495ef27b9450bed77bebd866c4ff2f6ecee9225988e22c101c5698b2307.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
babdb495ef27b9450bed77bebd866c4ff2f6ecee9225988e22c101c5698b2307.exe
Resource
win10v2004-20240802-en
General
-
Target
babdb495ef27b9450bed77bebd866c4ff2f6ecee9225988e22c101c5698b2307
-
Size
9.8MB
-
MD5
53783d56f92c68ecde7b8df0a6b8fc19
-
SHA1
412d3bfd8f44e18d8caa562bdc7b777e38894310
-
SHA256
babdb495ef27b9450bed77bebd866c4ff2f6ecee9225988e22c101c5698b2307
-
SHA512
348d5142a265c398762cd6dcfd31963e2d936a530b1911daedac652d1d0b6e6898bd06b728d17d14adac6d88e01e737a85ac039b5bc68350f1e834b9db696dcf
-
SSDEEP
98304:2PE/RxzweS4x+kcDrtFGayWzRrlI35as3+oX1K5ExGtM4sHgvhiWaOuBuoXqY7RS:22xzf+JOWz7IUspK5ExGtfsoMd4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource babdb495ef27b9450bed77bebd866c4ff2f6ecee9225988e22c101c5698b2307
Files
-
babdb495ef27b9450bed77bebd866c4ff2f6ecee9225988e22c101c5698b2307.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 548KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 93B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 546KB - Virtual size: 546KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ