Static task
static1
Behavioral task
behavioral1
Sample
bb86340a9ad16b4b17b6074ba0044c91.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb86340a9ad16b4b17b6074ba0044c91.exe
Resource
win10v2004-20240226-en
General
-
Target
bb86340a9ad16b4b17b6074ba0044c91
-
Size
132KB
-
MD5
bb86340a9ad16b4b17b6074ba0044c91
-
SHA1
9bafb4cd598b32fb0c1349c72312451b7dbe9088
-
SHA256
1288cbe081518e5420b8d6940609295c84df275ece30a7e887810c80b0d1741f
-
SHA512
b294016b4841da8c05233a6fc7ce3507239d4c4bcfa08681800f099cf87820f6cbcb8de8f19e739125283948addb71a8fed28aa9d92a1927cf0036e293484927
-
SSDEEP
1536:3m5r1QejCs/K/A/5WJHqTvdIRH1jZFURUhg4hjg/ibzzhoxDBtWjiJsP1kYftqQj:+reejCsqABzvKHFc1klzsARtq8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb86340a9ad16b4b17b6074ba0044c91
Files
-
bb86340a9ad16b4b17b6074ba0044c91.exe windows:4 windows x86 arch:x86
a6c06faeef749066e12148fb3fd3ff58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
Module32Next
GetTempPathA
GetEnvironmentVariableA
lstrlenA
GetShortPathNameA
ResumeThread
FindResourceA
VirtualAllocEx
GetModuleFileNameA
LoadResource
CreateProcessA
Sleep
LoadLibraryA
GetProcAddress
lstrcatA
ReadProcessMemory
GetThreadContext
Process32Next
Process32First
Module32First
CreateToolhelp32Snapshot
lstrcpyA
SetEndOfFile
CreateFileW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
WriteFile
GetConsoleCP
GetConsoleMode
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
ReadFile
SetHandleCount
GetFileType
SetFilePointer
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetLocaleInfoW
user32
MessageBoxA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteA
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ