Static task
static1
Behavioral task
behavioral1
Sample
ba76edecdd54427151a7e92cbc989c999a9f05d600c82385996ecc720ea6f0a8.exe
Resource
win7-20241010-en
General
-
Target
ba76edecdd54427151a7e92cbc989c999a9f05d600c82385996ecc720ea6f0a8.exe
-
Size
1.8MB
-
MD5
5a0ac5e693a59e7864986c2f81e0203a
-
SHA1
15439645211987ebe64cf0cca2a738b30c14ae30
-
SHA256
ba76edecdd54427151a7e92cbc989c999a9f05d600c82385996ecc720ea6f0a8
-
SHA512
d2109b1e8a0e81898076defc09e5c9a8b0e9de5196a297bb1e1184136727a7cd90bc2ad902a44e6664399fd2d8678da45041a1c156e4580caa89bead4f632be7
-
SSDEEP
49152:o47I1PG9GQYf3L79YXNacs9Tchgoile34:o47IcYLhSscPqeI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba76edecdd54427151a7e92cbc989c999a9f05d600c82385996ecc720ea6f0a8.exe
Files
-
ba76edecdd54427151a7e92cbc989c999a9f05d600c82385996ecc720ea6f0a8.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nbzazoeb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bmgvmdob Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE