Static task
static1
Behavioral task
behavioral1
Sample
ba19a25afc25c0f0df14bc6dfdbb8248ae1bd226ef1adf9ede8e9e57fdf2e826N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ba19a25afc25c0f0df14bc6dfdbb8248ae1bd226ef1adf9ede8e9e57fdf2e826N.exe
Resource
win10v2004-20240802-en
General
-
Target
ba19a25afc25c0f0df14bc6dfdbb8248ae1bd226ef1adf9ede8e9e57fdf2e826N
-
Size
371KB
-
MD5
7a6eefb3c84da4e6a00fd70a9e34fe00
-
SHA1
b60eeb49110b43b3a86d7da68b22cb68e0f5fe23
-
SHA256
ba19a25afc25c0f0df14bc6dfdbb8248ae1bd226ef1adf9ede8e9e57fdf2e826
-
SHA512
94044008bae8f3b28a955c0564b1a8458ff80698e19e16286fdb9a931ff98d7489a4e96730bd608fe05d6b58dcda1f1c199d8e29173a544cccc049acafc3db3b
-
SSDEEP
6144:dCsg1kXRR2Tw7CpWnIqkqaVzPdUCkVSY/V9Jpz1Px5soBaQq:d/RqWnIql4PdUlLlbsgpq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba19a25afc25c0f0df14bc6dfdbb8248ae1bd226ef1adf9ede8e9e57fdf2e826N
Files
-
ba19a25afc25c0f0df14bc6dfdbb8248ae1bd226ef1adf9ede8e9e57fdf2e826N.exe windows:6 windows x86 arch:x86
66360c4e2eeabd909183f4cfab574c6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
CloseHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapSize
ReadConsoleW
GetFileSizeEx
GetFileType
ReadFile
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapFree
HeapAlloc
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
WriteConsoleW
VerSetConditionMask
VerifyVersionInfoW
GetModuleHandleW
Sleep
GetProcAddress
LoadLibraryW
FreeLibrary
SetLastError
GetLastError
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
user32
SetWindowLongW
DestroyWindow
DrawTextW
ReleaseDC
GetDC
SetWindowPos
GetWindowDC
RegisterClassExW
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
ShowWindow
UnregisterClassW
GetSysColor
BeginPaint
EndPaint
LoadImageW
DestroyIcon
MessageBoxW
LoadCursorW
SetCursor
GetSystemMetrics
AdjustWindowRectEx
InvertRect
FillRect
SendMessageW
DrawFocusRect
SystemParametersInfoW
GetWindowRect
GetComboBoxInfo
DrawFrameControl
GetClientRect
TrackMouseEvent
CreateWindowExW
InflateRect
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetFocus
GetFocus
EnableWindow
IsWindowEnabled
RedrawWindow
gdi32
CreateFontW
DeleteObject
SetTextColor
SetDCBrushColor
SetBkColor
SelectObject
GetTextMetricsW
GetTextExtentPoint32W
GetDeviceCaps
GetStockObject
RestoreDC
SaveDC
ole32
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoUninitialize
dwmapi
DwmSetWindowAttribute
uxtheme
DrawThemeBackground
CloseThemeData
OpenThemeData
SetWindowTheme
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ