Static task
static1
Behavioral task
behavioral1
Sample
bb766e2626cb6009e1d8984d86646879.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb766e2626cb6009e1d8984d86646879.exe
Resource
win10v2004-20240226-en
General
-
Target
bb766e2626cb6009e1d8984d86646879
-
Size
64KB
-
MD5
bb766e2626cb6009e1d8984d86646879
-
SHA1
2b1430a52328a9ddcb367a498ecda87255f3c699
-
SHA256
dc887e4999132536a60a7cbd18ba46fda9703f7ee5d478d6138516a0db931986
-
SHA512
fbe46e2ad98464b67040ed5031e296278b64a4e7c65302316a6c3c5829f23934691050ea1140b45ddf443f93485a8238b52397f0bfc013d1179dc4aa90c7f0c2
-
SSDEEP
768:xJ1x0fKYyUZMMz1glb3QDuwv9sLOUhmD0UTrGupSSYxXMo7YBYVC4KzOZWiyl:2KY0Mz1mbADuwvSLzhQtGxj7YmVCHvl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb766e2626cb6009e1d8984d86646879
Files
-
bb766e2626cb6009e1d8984d86646879.exe windows:4 windows x86 arch:x86
aed6e940198aba26d69b414df6e28c07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetProcAddress
LoadLibraryA
Sleep
VirtualProtect
GetLocaleInfoA
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemInfo
user32
GetForegroundWindow
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE