Static task
static1
Behavioral task
behavioral1
Sample
PRODUCT LIST_MT014 & Boruh.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PRODUCT LIST_MT014 & Boruh.exe
Resource
win10v2004-20230220-en
General
-
Target
PRODUCT LIST_MT014 & Boruh.exe
-
Size
475KB
-
MD5
c9f61ef43cc4a52305b67eba4b198dd5
-
SHA1
18155d7d10db3ef43ac57cf00cedb313677d95c5
-
SHA256
a149d594242461b2f92e8b4954e539ddf86e14217929ac18a3ae6fc26a7ad98c
-
SHA512
66dab6029817fd6e86ab586420c866e91dc8265ff117009dc73ee52a57f8d556737f6addfc545c398fd15264e96c9f9a425c278edd25ea984b0d9d6a0418a11d
-
SSDEEP
6144:hHJ5qgkb3gKWbB210TcqQpyjdvp5BXFjQr9KB39BZ+gfHbv:NJ671acqQpypXBXFjQr9KB39Bkabv
Malware Config
Signatures
Files
-
PRODUCT LIST_MT014 & Boruh.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 309KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ