Static task
static1
Behavioral task
behavioral1
Sample
bb916f3abbd96396466d8f6c1ed6039e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bb916f3abbd96396466d8f6c1ed6039e.exe
Resource
win10v2004-20240226-en
General
-
Target
bb916f3abbd96396466d8f6c1ed6039e
-
Size
336KB
-
MD5
bb916f3abbd96396466d8f6c1ed6039e
-
SHA1
6ed83c92e67f09781bc7dafb560915b7d0b71810
-
SHA256
0e2be42d9b5e30c93675de03507137aef424648335e294ea64da4f382cf1644e
-
SHA512
9c1d0e7577689b148de899a51bccc3f14675b99392a87242c60cd5413ddc87cba3025dc89b87003ec6125c6af6f33035cc44b87aadbeb356d54069b2698c9184
-
SSDEEP
6144:VvNynJQGxIhnlmYUnj61Qed8qgVKpR9us5bGTXlb/tEBKuzOg:uLNnj61wqgAruMiXlSMuCg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb916f3abbd96396466d8f6c1ed6039e
Files
-
bb916f3abbd96396466d8f6c1ed6039e.exe windows:4 windows x86 arch:x86
942c36968048de236c40cbeca69b1e80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetLastError
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
ReadFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetModuleHandleA
ExitProcess
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
GetTimeZoneInformation
HeapSize
MultiByteToWideChar
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
user32
PostQuitMessage
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
Sections
.text Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE