Static task
static1
Behavioral task
behavioral1
Sample
bafb234318fe5d3b080463f0df496bc5d5c585e2a9c79ca390895a3d90eba09d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bafb234318fe5d3b080463f0df496bc5d5c585e2a9c79ca390895a3d90eba09d.exe
Resource
win10v2004-20241007-en
General
-
Target
bafb234318fe5d3b080463f0df496bc5d5c585e2a9c79ca390895a3d90eba09d
-
Size
59KB
-
MD5
82e02c9c2f22df42596ba447d3ad5707
-
SHA1
8590c7e2e403cf742cbae5c5a9b12c2597aec362
-
SHA256
bafb234318fe5d3b080463f0df496bc5d5c585e2a9c79ca390895a3d90eba09d
-
SHA512
02e42790c3785264f793f2dd60af2fef59e4f3993a29c94d8a99b3206f171cecaeaada1d5c6646a5f86abf4dbc83e688483d9cb1519e9b0a7741eec728e51df3
-
SSDEEP
768:z51fXhvBz9pruB8ckUEzW8s6bLFNC9h/bchZ/1H5Xp5nf1fZMEBFELvkVgFRo:z5xXL9prulkBqJ5Tc5pNCyVso
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bafb234318fe5d3b080463f0df496bc5d5c585e2a9c79ca390895a3d90eba09d
Files
-
bafb234318fe5d3b080463f0df496bc5d5c585e2a9c79ca390895a3d90eba09d.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ