Static task
static1
Behavioral task
behavioral1
Sample
bb99e48e075e089ae90272c6c18a273d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb99e48e075e089ae90272c6c18a273d.exe
Resource
win10v2004-20240226-en
General
-
Target
bb99e48e075e089ae90272c6c18a273d
-
Size
48KB
-
MD5
bb99e48e075e089ae90272c6c18a273d
-
SHA1
705d77e0076a8a6ca46de73905bc384ab29f68d1
-
SHA256
031f53cf006194196457e5435e8c367c965d8868d6cc9cc0c63feaef2a8f8fc6
-
SHA512
68eb848823deb0b6b049da0b7628542176cfae24dcfd47d3eb1706b3dabb8567545e219d5cb4298a24b6418f0450287dd65b0fea1a075403d84db4dd3fb77b5a
-
SSDEEP
384:CsTN4Q9Toyxm1E2wQNpLzVmlaDE5KmNPAGNPNohKD0f5io0h2OU4f6:CuoMmu2TpLG0mZNNPNof5io0h2H4y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb99e48e075e089ae90272c6c18a273d
Files
-
bb99e48e075e089ae90272c6c18a273d.exe windows:4 windows x86 arch:x86
fcd90e0baf2049ac3565f797999a8121
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
InterlockedIncrement
InterlockedDecrement
lstrlenA
MultiByteToWideChar
IsBadReadPtr
GetModuleHandleA
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStringTypeW
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
user32
ShowWindow
DefWindowProcA
PostQuitMessage
SetTimer
CopyRect
GetPropA
SetPropA
RemovePropA
GetClassInfoA
GetClientRect
GetSystemMetrics
SendMessageA
RegisterClassA
SetRectEmpty
UpdateWindow
LoadCursorA
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
WaitMessage
UnregisterClassA
CreateWindowExA
gdi32
GetStockObject
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
oleaut32
VariantInit
VariantClear
SysAllocString
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ