Static task
static1
Behavioral task
behavioral1
Sample
bbb0dc214aa7f425d438f41e96149b6b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bbb0dc214aa7f425d438f41e96149b6b.exe
Resource
win10v2004-20240226-en
General
-
Target
bbb0dc214aa7f425d438f41e96149b6b
-
Size
48KB
-
MD5
bbb0dc214aa7f425d438f41e96149b6b
-
SHA1
394f49c893c3820b98fd5f15a69b0008c034e5eb
-
SHA256
e1cb1186018f057cb949c44f2cf6eabcfcb21a99c2ada3bfe582f097e332b2a4
-
SHA512
c19b1cbe6deaa4f251c207409e3b4c0edf8fc80e0287ae196b26563c04c6b04513479b7889304d0e51c25b73f27a1b020f7d9da0a34cae5ddac4e25e91971fe4
-
SSDEEP
768:rLX1QENp/0aTnkXa51zQr0TT1SGvskAPOdCn99c2uzTXQMCUaF:rZQEXVTnkXa5SIt5vskcDn92/g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbb0dc214aa7f425d438f41e96149b6b
Files
-
bbb0dc214aa7f425d438f41e96149b6b.exe windows:4 windows x86 arch:x86
340fd2d65c915b52f8d767486d70d9d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
GetTopWindow
MessageBoxA
DialogBoxParamA
LoadIconA
ArrangeIconicWindows
CharUpperA
IsIconic
CharNextA
DestroyIcon
FlashWindow
GetSystemMetrics
RegisterWindowMessageA
ShowWindow
LoadCursorA
UpdateWindow
EnableWindow
SetCursorPos
CharLowerA
KillTimer
SetTimer
ShowCursor
GetMessagePos
SetWindowTextA
GetMenuItemCount
GetDesktopWindow
ReleaseDC
GetParent
kernel32
GlobalDeleteAtom
lstrcatA
SetLastError
LoadLibraryA
Sleep
GetProcAddress
GlobalFindAtomA
GetLastError
GlobalAddAtomA
CopyFileA
AllocConsole
FindResourceA
GetConsoleOutputCP
lstrlenA
GetCommandLineA
gdi32
GetObjectA
SetBkMode
CreateCompatibleDC
GdiGetBatchLimit
DeleteDC
DeleteObject
EndPage
comctl32
InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ