Static task
static1
Behavioral task
behavioral1
Sample
BID (ITB).exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
BID (ITB).exe
Resource
win10v2004-20220414-en
General
-
Target
59643cb09c6697e43bcb64c8ade22b23c0a95a5ef4106603ce2ead7551af4e20
-
Size
682KB
-
MD5
475b1e4502023c5cc2a1fd977d7e3098
-
SHA1
11f9fa602cfffe6f37073642e69e925b2038e261
-
SHA256
59643cb09c6697e43bcb64c8ade22b23c0a95a5ef4106603ce2ead7551af4e20
-
SHA512
b1748e25ce8cbff534edff89f6ca3ea5e596c96e37460a963223e522779ff164b179dddb12fc436323afbea5dfea1e583b04599fde6bc19e35ce680032b2c705
-
SSDEEP
12288:IQrRwd4X1Xu5ZnqcYo+4rcc2iySoXXfFLnGzo7X0CD80pRBSS/d4yREX3ko22:IQrRwOXhuOWrHyZvtGkX1VpRx4qEkoT
Malware Config
Signatures
-
resource yara_rule static1/unpack001/BID (ITB).exe upx
Files
-
59643cb09c6697e43bcb64c8ade22b23c0a95a5ef4106603ce2ead7551af4e20.zip
-
BID (ITB).exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 689KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 474KB - Virtual size: 473KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 481KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ