BnB[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BnB.exe
Size

1.6MB
MD5

371a5a1d1c6e453b988a825c2ec09fa1
SHA1

da301f729d130506daf53d2752078e371846f972
SHA256

d1178d1188228342ed145c53275c3ea1ac505ed155ed58fad538af23b739afca
SHA512

a861a4893e5878db561c2847e23907520993230f76ce9a73e8105a5360d3bbaa18cf20be035450a4d7fa0f7271d20bb6727d2d9a868f528205ab3b580b4bec89
SSDEEP

24576:2T/zBGCKUPw/ke1foixJrXPpEhYh7cUWoFZMEiaxI0r9vfCwUAAxWr:2T/lGAwsurrKhG+oFZMEiaxI0rtCwUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BnB.exe

Files

BnB.exe
.exe windows:4 windows x86 arch:x86

Password: pawel

ef1b0c6541d0c92f6285b38f04673a52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
malloc
free
realloc
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
WriteFile
HeapFree
CloseHandle
FreeLibrary
HeapReAlloc
HeapAlloc
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
IsBadReadPtr
GetProcessHeap

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ