Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Barys.315692.14960.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Barys.315692.14960.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Variant.Barys.315692.14960.4771
-
Size
753KB
-
MD5
2995f8cb434b9975cc3f6f74dd1d1719
-
SHA1
c90323b5566d5b618cd1689060ae95c188a1312a
-
SHA256
fe233b4b31a505cfb89413f4cc218a34f3bcd7a38589cfd029e01c558b0cb47e
-
SHA512
4e9425e00fc39b13f0bab404468bdbdedbd65e4fd04cf1b9db5c043937d656d35719085008943c210bc1b4a22daa37795f90aa01ca279e19f79dbd5478dea6ce
-
SSDEEP
12288:FhTZfTiAc4ENBb3Rwbva22Qj9UbhnlWfiCUa2TrHlwrZQ+THTXpfNd:LFLa37IFYbCf2NwVQIP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Variant.Barys.315692.14960.4771
Files
-
SecuriteInfo.com.Variant.Barys.315692.14960.4771.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 746KB - Virtual size: 745KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ