Static task
static1
Behavioral task
behavioral1
Sample
bg 0.8.7.6 (1).exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bg 0.8.7.6 (1).exe
Resource
win10v2004-20230220-en
General
-
Target
bg 0.8.7.6 (1).exe
-
Size
3.5MB
-
MD5
4aea46ba593f0f6374569f2f5f1f3d3e
-
SHA1
20061c2b7057fb6ad8cfaa60127d46aa34bfde45
-
SHA256
8d9e65c47a6c83a43e26f686e624a3e881d7581f0f7bd4ec15cdffc9f1c6ea6a
-
SHA512
c73980b9fae1ee0b5244d86ca1cad5120e96354190cb7cd3fcc44a6f72ed1a9c6b0ef40fd662654407a8ed05106bdb7edccbb004102a5d0676ae4bbc48783d1c
-
SSDEEP
98304:M3Ae09lnL0oSOUcwti78OqJ7TPBoSguW:MwVoLOUcwti7TQlFguW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bg 0.8.7.6 (1).exe
Files
-
bg 0.8.7.6 (1).exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ