bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.zip
- SHA256 3b99b23b1e2008016f40afb017700d1545ebe87c5dd131c6afc08b9ea975ae2c
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.zip
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.dll
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.zip
- Size 2.9MB
- Sample260626-vbvb3acz4w
- SHA256 3b99b23b1e2008016f40afb017700d1545ebe87c5dd131c6afc08b9ea975ae2c
- MD5 811a34abee6857f7b12c79f3c0246fef
- SHA1 3204cacbcf3aa45253d96e52733ca64dc1c0e716
- SHA512 eb818b9a4a57273f29c06eb82bb9682db6715988e0f9095d7556576f66bb718bd77a0cb3a54f71b7bd4a414184f2a93531381356f83c9c9bfb926a4dcdacb835
- SSDEEP 49152:29qhJRtDsHgmvDbm5t45zs1k0iid1nAzAKAg3ZpDRaY6M2pHnSr:28sVv/G4Cyc15O3ZdRa+2M
- TLSH T189E533CA902A8501DD98BD1392B2746AE6B5FED9F350A1DB7D5881CC09FC8A4DDC07E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.exe
File Explorer
-
bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.zip.zip 2.9MB
-
bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.exe.dll 5.1MB
bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373.exe
- IMPHASH 0cdadfa1098d845dd3b4cf92625b5f04
- SHA256 bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373
- MD5 6776873bba10f9f247ef5f63cd0bd8ad
- SHA1 ae549f86d58e56deb5408327745113e2728300dd
- SHA512 de5cd7a6ff72f06371966dddb055967a5fa7b042cf7126c9acc7da65a2732616465d90885cf629c9f2d8c33240e0de04165f3b8832d788c6d792e97befb0db77
- SSDEEP 98304:DGDqPoBhz1aRxcSUDk36SAEdhvxWa9P593:DGDqPe1Cxcxk3ZAEUadz
- TLSH T1A73633582268D6BCE006197444B3CE2AE7733C5157BF5A0F87504DAB3E13B9BBB90B52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
5612
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA
GetCurrentThreadId
FlsSetValue
GetCommandLineA
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
TerminateProcess
GetCurrentProcess
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapFree
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
GetModuleFileNameW
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapSize
CreateFileW
FlushFileBuffers
PlayGame
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=83, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=9, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=80, id=1, productName=Unmarked objects,
count=23, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,