Static task
static1
Behavioral task
behavioral1
Sample
BB5_calc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
BB5_calc.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
BB5logunlocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
BB5logunlocker.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
install.bat
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
install.bat
Resource
win10v2004-20231222-en
General
-
Target
8a30bb1c412f600af4514b57df158cba
-
Size
11KB
-
MD5
8a30bb1c412f600af4514b57df158cba
-
SHA1
288c9accadb2dc54de6929bad57e4e33bce80bad
-
SHA256
564d2a21c9c1f7ec5e213ffd8ca0cdc568f9613462a018909ea35a666d179ff5
-
SHA512
adf751ac642d17faf1ef8ed631b94573d93ff69fb30dc2ae5ebd8255a0db89ea4211dd9837f3a4e150ce37d65cfbe13d4a93bb78af3357b9e02efd342bd56daa
-
SSDEEP
192:n7hvZlmGfKsvLH+cIYf1Ey8h++lKU3bWpwYvBc+oAW2wkIPQTbiYOfYdJjB//8XS:ndvZlTKsvLHJILrhXlKal4m+oz2wknO8
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/BB5_calc.exe unpack001/BB5logunlocker.exe
Files
-
8a30bb1c412f600af4514b57df158cba.zip
-
BB5_calc.exe.exe windows:4 windows x86 arch:x86
536afa50b4f36c0fa1b92b37140c5ca9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetFileSize
GetTickCount
CloseHandle
GlobalFree
ReadFile
SetFilePointer
WriteFile
user32
SetDlgItemTextA
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
BB5logunlocker.exe.exe windows:4 windows x86 arch:x86
8fbf0b358a581a9ee33f3ad89b458039
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCommTimeouts
CreateFileA
DeleteFileA
ExitProcess
GetCommState
GetCommTimeouts
GetFileSize
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetCommState
CloseHandle
SetFilePointer
SetupComm
WriteFile
user32
MessageBoxA
DialogBoxParamA
EndDialog
LoadIconA
DestroyIcon
SendMessageA
SetDlgItemTextA
ShowWindow
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bb5_unlocker.cfg
-
bb5logunlock.txt
-
install.bat