Static task
static1
Behavioral task
behavioral1
Sample
bibi.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
bibi.exe
Resource
win10v2004-20230703-en
General
-
Target
bibi.bin
-
Size
175KB
-
MD5
9639632d58a80888e93ade5760ef4f5a
-
SHA1
5d056a44ceed1d9c51876f85c06ff4d94da18837
-
SHA256
038f9c255531f4ca01639d492b67a1e2861533c3064da9e1461d2e4c7a54eb62
-
SHA512
cbd7dcbe3843a1e8ff82123ec88b477f8d242a5ad354ef2748881d533d632f3b566d19dd34cf9e2c9817c373ca48c484605450a476e9f0a3f55b7c2d9ee8ab89
-
SSDEEP
3072:UXk25u7TPZg6ipMgKYjfisO6N94iltFgLAtp544iGGPSEtnk+u9:U0lnbipMgKGNZ7RgLaiXP/n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bibi.bin
Files
-
bibi.bin.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE