Static task
static1
Behavioral task
behavioral1
Sample
bb88f0c6538554a602a8061b4299e0c5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb88f0c6538554a602a8061b4299e0c5.exe
Resource
win10v2004-20240226-en
General
-
Target
bb88f0c6538554a602a8061b4299e0c5
-
Size
48KB
-
MD5
bb88f0c6538554a602a8061b4299e0c5
-
SHA1
88b5ecbb3bf970703fbcb84482774aa1ab3a24bb
-
SHA256
713207362e05c4200cc3af04c50d7733d684fa1259df116f36aba7dfcd43535a
-
SHA512
2c0fdf8c96244ccda095861431bf63cb08815ca504dfef3ec2e1cae6f1c0c7cf8a3abc01ac8b429ce741223e063e8dfad5a157c9e4fc96db6dd17b99b7b6ceae
-
SSDEEP
768:JaWf0o+jQIQaQjwQbjz/cTCG4LxnX9nn5v4wpjhEaHF1:gHoOZNQjQstnXNn5gghRHP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb88f0c6538554a602a8061b4299e0c5
Files
-
bb88f0c6538554a602a8061b4299e0c5.exe windows:4 windows x86 arch:x86
84b91592d8fd21dc883b24dd789d867c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetGetConnectedState
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
kernel32
IsBadCodePtr
IsBadReadPtr
Sleep
GetLastError
FormatMessageA
SetStdHandle
CreateFileA
GetStringTypeA
GetStringTypeW
LoadLibraryA
SetEndOfFile
GetProcAddress
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
SetEnvironmentVariableA
ReadFile
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
CloseHandle
WriteFile
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
GetCPInfo
CompareStringA
CompareStringW
advapi32
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE