Behavioral task
behavioral1
Sample
lilbabymkr.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
lilbabymkr.exe
Resource
win10v2004-20231215-en
General
-
Target
lilbabymkr.exe
-
Size
2.3MB
-
MD5
78cd19564478d0ae7cc4d2772431b4eb
-
SHA1
dd2ad87a8dc9d87961d8cb1dd2e6481f99832bc2
-
SHA256
2ad1cbdf628b055dadbea41b7bded1d246978da20c0130313a3126e90347366e
-
SHA512
cf4095d061c878fbd068a7e678913aefa12cb5bc8d1c6cd248bcfaa0c96532df6d63873d294701574bb90cad06160faec21fa53dcff3a3d34714ef5903e88c21
-
SSDEEP
49152:5tVPMoyXBl2CB3mnXNq7vDrK0//yj3oYqJpb2Dr4J7p23HDLF:lMoyx/2nuS0yup1z23HD5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource lilbabymkr.exe
Files
-
lilbabymkr.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 724KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE