Static task
static1
Behavioral task
behavioral1
Sample
bb7df1867a3544dd79bd1969624bf583f180c63e3b3ec8839fcbd54f9d6ba52e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
bb7df1867a3544dd79bd1969624bf583f180c63e3b3ec8839fcbd54f9d6ba52e.exe
Resource
win10v2004-20230824-en
General
-
Target
bb7df1867a3544dd79bd1969624bf583f180c63e3b3ec8839fcbd54f9d6ba52e
-
Size
820KB
-
MD5
6aefd5e69e0692fbbc37c2cd87ac2dfc
-
SHA1
d5e36cdb8eeb7862032537efff003652db690eca
-
SHA256
bb7df1867a3544dd79bd1969624bf583f180c63e3b3ec8839fcbd54f9d6ba52e
-
SHA512
93d46f919ce651705c0150af9714d2521ea93e1da507b7cdefb506ff0624cc8b3f945a564787f2e54ad7d7bb3c1ac645e0e273b295edfbd1428b4b1ac203e2b3
-
SSDEEP
12288:xdDTij80JbhqcQ2UNruPlxC3/+UjMqF+LRZ:xJc/nMv+CjsLv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb7df1867a3544dd79bd1969624bf583f180c63e3b3ec8839fcbd54f9d6ba52e
Files
-
bb7df1867a3544dd79bd1969624bf583f180c63e3b3ec8839fcbd54f9d6ba52e.exe windows x86
940dc92f00644b252890c4fef3958d51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetConsoleCtrlHandler
IsBadCodePtr
ReadFile
SetStdHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CreateFileA
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
Sections
.text Size: 736KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ