2024-06-19_bbd09d894aef4b119e5952356d048b5b_bad-rabbit_eternalpetya | Triage

Sharing

General

Target

2024-06-19_bbd09d894aef4b119e5952356d048b5b_bad-rabbit_eternalpetya
Size

73KB
MD5

bbd09d894aef4b119e5952356d048b5b
SHA1

d9f5933d59d7ec1548ae51299de7857624cd642c
SHA256

fdaa6025652514b4accc7fc43f18564fddcff080f5ea7ff9e8f19032d26e7aec
SHA512

00c30ed6eaed27b13cacfd4d05dc43a92f9d3b8169a85bba27204eee318620fdd286b98b43af39bc3b7bab27f4046b71f8f79f434cdaf006e0e453ecda4924a5
SSDEEP

768:lUyKhledDz5WKZ49LNIOlnToIf1eClaVUnjpfqzwAvkUnj42/8:I+eNIOlnToIfw/VuFAvku42/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-19_bbd09d894aef4b119e5952356d048b5b_bad-rabbit_eternalpetya

Files

2024-06-19_bbd09d894aef4b119e5952356d048b5b_bad-rabbit_eternalpetya
.exe windows:5 windows x86 arch:x86

e3bda9df66f1f9b2b9b7b068518f2af1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetFileSize
CreateProcessW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcessHeap
WriteFile
GetSystemDirectoryW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcatW
CloseHandle
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter

user32

wsprintfW

shell32

CommandLineToArgvW

msvcrt

wcsstr
memcpy
free
malloc

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ