Static task
static1
Behavioral task
behavioral1
Sample
ba4eaad0e8c22ffac8b373d3e42933d0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ba4eaad0e8c22ffac8b373d3e42933d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
ba4eaad0e8c22ffac8b373d3e42933d0N
-
Size
64KB
-
MD5
ba4eaad0e8c22ffac8b373d3e42933d0
-
SHA1
ae1934c8f8330cf09a5b4db73d0dfa3f9d82c0e0
-
SHA256
f089f17f4c37acbf48d2e04d4deba70a956eb5059035a6e952ce30c90f01d013
-
SHA512
4e9c1d508f61b6f4492367205763a0a2fdcae5f72b6562fc5f00ac21d55f37e470d4dc5f12142f4656c7a3f96f2b53669424259f07e222aac73db26b594e0dc9
-
SSDEEP
1536:XA7NntELvEH4d6KxXs4+UXruCHcpzt/Idn:Q7dtdH4EWsJpFwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4eaad0e8c22ffac8b373d3e42933d0N
Files
-
ba4eaad0e8c22ffac8b373d3e42933d0N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ