Behavioral task
behavioral1
Sample
08c1b360ad5f727a0660adfa74bd7509.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
08c1b360ad5f727a0660adfa74bd7509.exe
Resource
win10v2004-20230220-en
General
-
Target
08c1b360ad5f727a0660adfa74bd7509.exe
-
Size
237KB
-
MD5
08c1b360ad5f727a0660adfa74bd7509
-
SHA1
43a8d5a55f858ac67b195d2ebebc4ea498686f38
-
SHA256
18c5f62d2fff0705013b83fc5c5c09ad7b9faeddac4bf4c8f2b5bb532f9488de
-
SHA512
9c80b9f3ef2152e391222fb2a88d3d14d1bdfe6de256cf2659282dcc16cf0ff0d27f82500446c3e7375a481a47d39a0aad3d4f8e805dfe67b8e126c75253cfcd
-
SSDEEP
3072:L5IAyZvNOYWO3bAfFFHjBl+Bl2K4eqibSE6czFKJLQPeI/Kh73WmqcSCJLeKgh2B:iAyZvHWbTH1l6RDbDjkIpbs
Malware Config
Extracted
blackguard
https://api.telegram.org/bot5973155151:AAGgQ2GQ_WZVdt1bf_ib5JEZozBNQ7N52ww/sendMessage?chat_id=1870895902
Signatures
-
Blackguard family
Files
-
08c1b360ad5f727a0660adfa74bd7509.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ