Static task
static1
Behavioral task
behavioral1
Sample
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/Program.js
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/obj/Debug/Bad Apple in Wallpaper.exe
Resource
win10-20231220-en
Behavioral task
behavioral3
Sample
Bad_Apple_in_Wallpaper-BAiW_Frames/Bad Apple in Wallpaper.exe
Resource
win10-20231215-en
Behavioral task
behavioral4
Sample
Bad_Apple_in_Wallpaper-BAiW_Frames/create_frames.cmd
Resource
win10-20231220-en
General
-
Target
Bad_Apple_in_Wallpaper-BAiW_Frames.zip
-
Size
19.5MB
-
MD5
dc46afa79cc72a81efab316750287cef
-
SHA1
adc9a15b29d41c5cdae621980c136bb25a337ba4
-
SHA256
2b931de929ebb11a7bf4720ddbbb1db37abc88d08553d5ca4d814a139209b895
-
SHA512
0e6679c89327d7617c05b8bd2aa1d682f0b8f0bde376a8d1216e9416fe67299d1a6d7d2b6a10000ce351863c36516d1c661aba2917133661b8ed7c3935c36a3a
-
SSDEEP
393216:kGaHozJm2bo27SZQaAtoGSVbzFRsDVgmZTFZL2fMZs0DgQBvgFMs/s4K8lbbXp6Z://Tbo2uCqVPFRC6kTFZ5y0DgSOvK8tpW
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/obj/Debug/Bad Apple in Wallpaper.exe unpack001/Bad_Apple_in_Wallpaper-BAiW_Frames/Bad Apple in Wallpaper.exe
Files
-
Bad_Apple_in_Wallpaper-BAiW_Frames.zip.zip
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BA_Original.mp4
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/BAiW.sln
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/App.config
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/Bad Apple in Wallpaper.csproj
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/Program.cs.js
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/Properties/AssemblyInfo.cs
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/obj/Debug/Bad Apple in Wallpaper.csproj.CoreCompileInputs.cache
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/obj/Debug/Bad Apple in Wallpaper.csproj.FileListAbsolute.txt
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/obj/Debug/Bad Apple in Wallpaper.csprojAssemblyReference.cache
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/obj/Debug/Bad Apple in Wallpaper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/obj/Debug/Bad Apple in Wallpaper.pdb
-
Bad_Apple_in_Wallpaper-BAiW_Frames/BAiW/Bad Apple in Wallpaper/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
Bad_Apple_in_Wallpaper-BAiW_Frames/Bad Apple in Wallpaper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bad_Apple_in_Wallpaper-BAiW_Frames/README.md
-
Bad_Apple_in_Wallpaper-BAiW_Frames/create_frames.cmd