Static task
static1
Behavioral task
behavioral1
Sample
BattleNetReporter.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
BattleNetReporter.exe
Resource
win10v2004-20230220-en
General
-
Target
BattleNetReporter.exe
-
Size
1.5MB
-
MD5
b5d7dcfd5e05c483d88e772cd5f33731
-
SHA1
ea6a6d97b557f830a35a70e8ef7143bc9b69ca1d
-
SHA256
bc9106b3419091661b2c13e2aa731000f23495b35bc1e50ecc1c9000e050e146
-
SHA512
bd0c351090efda68f539ab4d635aead1f661d6ddf4dcf0c7009ed35f901d25fc242acf00a2907f2aa2e2b9ff35a57ef3ed739d5ca4de0f8b12d4ce8b5eee079f
-
SSDEEP
24576:pCXYEopBLD+33y/QUnhRfQaEQvmY77nk+:mFly/QIhWatmi7nk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BattleNetReporter.exe
Files
-
BattleNetReporter.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ