Static task
static1
Behavioral task
behavioral1
Sample
bb4984f48ed851e765ac42bcfbce9b83.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb4984f48ed851e765ac42bcfbce9b83.exe
Resource
win10v2004-20240226-en
General
-
Target
bb4984f48ed851e765ac42bcfbce9b83
-
Size
505KB
-
MD5
bb4984f48ed851e765ac42bcfbce9b83
-
SHA1
0a1df687685a8cae62f47b912380cdf73bc4ec3f
-
SHA256
db9db70d0d208f98ab273538deca0d66e9d9a0995d8b35496195c5d8ec80ba43
-
SHA512
5d4fa9b342dc3dc115cec6db9effe48d20c3253f3e41e6549f5d0c2e4218005524df208008837a6cb4b04fe68f1ae4d32425485a1a8cd1981370de421ffe7d8a
-
SSDEEP
12288:kQkFKuP2ZN9hFZh5lEVuQN6fYHul0TQgb3QuD+6B:k/PSh5lEdN2yTnb3QuD+A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb4984f48ed851e765ac42bcfbce9b83
Files
-
bb4984f48ed851e765ac42bcfbce9b83.exe windows:4 windows x86 arch:x86
26b2eede0a9ba93eaed2014d71510968
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
RetrieveUrlCacheEntryStreamW
InternetGoOnline
InternetTimeFromSystemTimeW
InternetGetCookieW
GetUrlCacheConfigInfoA
InternetFindNextFileW
gdi32
SelectPalette
DeviceCapabilitiesExW
GetRegionData
SetWindowExtEx
GetStretchBltMode
CreateDIBPatternBrush
RemoveFontResourceW
GetDeviceCaps
SetBkMode
GetFontLanguageInfo
IntersectClipRect
CreateRectRgnIndirect
RestoreDC
FlattenPath
SetMapperFlags
StretchBlt
CreateSolidBrush
PolyDraw
SetWindowOrgEx
SetMagicColors
GetCharWidthA
GetPixel
DPtoLP
PlgBlt
comdlg32
GetSaveFileNameW
FindTextA
comctl32
InitCommonControlsEx
user32
CreateDesktopA
RegisterClassA
DlgDirSelectExA
GetCursor
RegisterClassExA
GetMonitorInfoA
EnumDesktopsW
GetProcessWindowStation
BeginPaint
wvsprintfA
kernel32
EnumSystemCodePagesW
SetHandleCount
GetDateFormatA
GetVersion
EnumDateFormatsW
GetLastError
GetCPInfo
CompareStringA
CloseHandle
QueryPerformanceCounter
LoadLibraryA
GetConsoleCP
RtlZeroMemory
SetUnhandledExceptionFilter
CreateFileA
GetStringTypeW
GetOEMCP
SetConsoleCtrlHandler
TlsSetValue
CreateMailslotA
GetCurrentProcessId
SetLastError
IsValidCodePage
GetConsoleMode
EnumSystemLocalesA
HeapAlloc
GetVersionExA
ResumeThread
DeleteCriticalSection
FreeEnvironmentStringsW
GetTickCount
SetEnvironmentVariableA
InitializeCriticalSection
GetTempPathA
WriteFile
GetCurrentProcess
TlsFree
SetStdHandle
HeapCreate
IsDebuggerPresent
VirtualQuery
IsValidLocale
FindNextChangeNotification
CompareStringW
GetProcAddress
GlobalUnlock
FreeLibrary
GetStringTypeA
GetLongPathNameA
GetUserDefaultLCID
FreeEnvironmentStringsA
MultiByteToWideChar
GetCurrentThreadId
GetACP
GetEnvironmentStringsW
VirtualFree
FillConsoleOutputCharacterW
OpenMutexA
ReadFile
FlushFileBuffers
HeapReAlloc
GetThreadPriorityBoost
GetTimeFormatA
CreateMutexA
VirtualAlloc
InterlockedExchange
EnterCriticalSection
TlsAlloc
GetCurrentThread
LCMapStringW
LocalSize
ExitProcess
WritePrivateProfileStringW
UnhandledExceptionFilter
FindAtomA
WideCharToMultiByte
InterlockedIncrement
LocalHandle
OutputDebugStringA
InterlockedDecrement
GetModuleFileNameA
TlsGetValue
CommConfigDialogA
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCommandLineA
HeapDestroy
LocalFree
LCMapStringA
GetEnvironmentStrings
GetModuleHandleA
GetLocaleInfoW
HeapSize
LoadLibraryW
Sleep
RtlUnwind
GetFileType
lstrcpyA
GetTimeZoneInformation
SetThreadAffinityMask
LeaveCriticalSection
GetStartupInfoA
TerminateProcess
WriteConsoleW
GetConsoleOutputCP
SetFilePointer
GetProcessHeap
HeapFree
ReleaseSemaphore
WriteConsoleA
GetStdHandle
Sections
.text Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ