BadJoke.Blaireau.A (2).zip
- SHA256 5d7198936e0aa1b68c66d829726cc3613f2eb285de1648d542242d1bde761ab6
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BadJoke.Blaireau.A/ExecuteMe.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
BadJoke.Blaireau.A/ExecuteMe.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
BadJoke.Blaireau.A/make.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
BadJoke.Blaireau.A/make.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target BadJoke.Blaireau.A (2).zip
- Size 221KB
- Sample260731-phw7casepd
- SHA256 5d7198936e0aa1b68c66d829726cc3613f2eb285de1648d542242d1bde761ab6
- MD5 fb1a7bf84e443b21aab9037cf66e00de
- SHA1 06c85a094fed460bf70a8e173e0b161852155d33
- SHA512 bf26a349f2e8fe8d43b3e68dcec559dacc8579e22147daa575ae93357866a3ba8be7ddc2a2157db2cd55562c0b3862b84f3c774bcc1794d316e8148fbb998b6d
- SSDEEP 6144:KYd1fhxaXtjE/3hT4wpifttG87PLxN3OXvQ6GMne5:KYd137/N4Qy9dNuVGQO
- TLSH T1F92423890477E9FBCA11D475A097DFAC2CFD9C26A07A194A176D8ED61D03F0F00FA856
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BadJoke.Blaireau.A/ExecuteMe.exe
File Explorer
-
BadJoke.Blaireau.A (2).zip.zip 221KB
-
BadJoke.Blaireau.A/ExecuteMe.exe.exe 446KB
-
BadJoke.Blaireau.A/blaireau.asm4KB
-
BadJoke.Blaireau.A/make.bat225B
BadJoke.Blaireau.A/ExecuteMe.exe
- IMPHASH 8ef723e298e72ed43bc1ccb649bfa991
- SHA256 ea17c02df8860de6fbb1855a8291871727a2deffe28b0ac38e59cbba7f20b380
- MD5 d0b4de3c07f9661dbf1f9155a437d2dd
- SHA1 b33b3130e76b5915f06d5804cd120ef40ad67c53
- SHA512 265d2c0cf1a45bb75b28a46b0d17df61caba373425b82bf43cdb6f14108c42f64945742ed4b69f8e633abff1ad6cba8af760f1ef26dcc29f03ce687ce4619d17
- SSDEEP 6144:6WqCwu1llCHJNpPFKloxTG+9Q71fxdVteHlpqI4luU+y:6W7CH7pP4lgMVteHl2Z
- TLSH T16AA49C1277B8F1A1D48866301C5E55FA9BE50D83AD003E817AAE7F166F14F46EDCAB0C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5581
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
HeapDestroy
HeapCreate
HeapAlloc
Sleep
CreateThread
CloseHandle
WaitForSingleObject
lstrlenA
MultiByteToWideChar
CreateFileA
ReadFile
SetFilePointer
GetProcessHeap
HeapFree
SizeofResource
SetLastError
MulDiv
LockResource
GetModuleHandleA
LoadResource
ExitProcess
FindResourceA
SetThreadPriority
user32
SetCursor
SetCapture
SendMessageA
ReleaseDC
ReleaseCapture
RegisterClassExA
MoveWindow
LoadIconA
LoadCursorA
SetTimer
SetWindowLongA
SetWindowPos
ShowWindow
SetFocus
SetForegroundWindow
KillTimer
GetWindowRect
GetWindowLongA
GetParent
GetDlgCtrlID
GetDC
GetCursorPos
GetClientRect
FrameRect
FindWindowA
EndPaint
EndDialog
DialogBoxParamA
DefWindowProcA
CreateWindowExA
CallWindowProcA
BeginPaint
SetLayeredWindowAttributes
SetWindowTextA
advapi32
RegOpenKeyExA
RegCloseKey
gdi32
CreatePatternBrush
CreateSolidBrush
DeleteDC
DeleteObject
CreateFontIndirectA
CreateDIBSection
GetDeviceCaps
SelectObject
CreateDIBitmap
CreateCompatibleBitmap
CreateCompatibleDC
comctl32
InitCommonControls
ole32
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
oleaut32
OleLoadPicture
OleLoadPicturePath
shell32
ShellExecuteA
winmm
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutClose
waveOutGetPosition
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
423KB
Virtual Size
422KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=77, id=19, version=8078,
count=4, productName=Unmarked objects (old),
count=23, id=1, productName=Unmarked objects,
count=22, id=18, version=8444,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
BadJoke.Blaireau.A/blaireau.asm
- SHA256 ee7781f300317de66a6645cde786cad1a138d2a46c6ad41a3de4b6279ed2f389
- MD5 c8419a1b1de225ca853b073a0ef20ac9
- SHA1 87e7062a889eebdf86c65700e6301e43962f8cd6
- SHA512 4fbdb7ed57411642c5f3b44eb489938004e87ee34dd474304c824bb0c72489b2a303c6dea412e4af7f1cdbc78ee6d207be2d8cfc52a95ac38d641462de23d20f
- SSDEEP 96:5T4NVTO/o3J6Epk2T8WLxSmlTV+uQ8kzkHzamgN1to:5qkcRYmlTV+JBzkHza1DG
- TLSH T16B816402B31F41510BB526FA1835D502864EF82E3F7F8C95B44EA1A4EFCD46CADB3595
- MD5 SHA1 SHA512 SSDEEP TLSH
BadJoke.Blaireau.A/make.bat
- SHA256 a274bae00a2ff645868dceacc110729631228e631db9d5772e13143ac3d97421
- MD5 251e36896ed4caa8f3604a1fc04c05ff
- SHA1 ab057a68822dc7f1c3f4c0629f3e6d834283cafc
- SHA512 3f3f5b8735ed3a55662237b4459181cf3d8d5a85f841331a036ce265a811aaf41f97cfa5eb76851308a45f07842b0918b129f81c9c610763dfe99897da7c6efa
- TLSH T1FBD0A76444CB19D3443E0698564D45CB372EE0FD03BDDC5964A16690EB552D85A1D910
- MD5 SHA1 SHA512 TLSH