Static task
static1
Behavioral task
behavioral1
Sample
booooyyyyy.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
booooyyyyy.exe
Resource
win10v2004-20240226-en
General
-
Target
be2e2c8b455682a57f361ec011c56a05db477b55f329970b954a8bb35cb9b714.img
-
Size
814KB
-
MD5
165be7c69c30c06d4aa9b31bc3eb6a15
-
SHA1
a0521ac8e0d32fd2a8128f6bfd018e4436fe4f89
-
SHA256
be2e2c8b455682a57f361ec011c56a05db477b55f329970b954a8bb35cb9b714
-
SHA512
0e3309d419ed2e6a49df08649c95a835de8bd6e534bce5d8bd4211177e01784db02e199c522de3c3a34278ea4dae92ba98d89570e2a319c2eac4bd00a0e06b1b
-
SSDEEP
24576:Y1lxin0ENs2Rakc0l7e/qzPyKbn0i5OzaQuM:YS1N7aucDC0tjd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/booooyyyyy.exe
Files
-
be2e2c8b455682a57f361ec011c56a05db477b55f329970b954a8bb35cb9b714.img.iso
-
out.iso.iso
-
booooyyyyy.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 762KB - Virtual size: 761KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ