Static task
static1
Behavioral task
behavioral1
Sample
batgba.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
batgba.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
batgba_readme.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
batgba_readme.html
Resource
win10v2004-20230220-en
General
-
Target
batgba225b.zip
-
Size
229KB
-
MD5
56403fa1ef36a708723f101a5d5b3e3f
-
SHA1
ec7f24ca20a43bcb5af3d7174dc35f1ee57dfe12
-
SHA256
a31ab5822e5b8998f582fc822f0f04fb981c26e2f8792cffa1eec6eebfe1330a
-
SHA512
dfc9547ff97c70c23ba0e046a8102e82196c75b514bcb10a8c7bf605e31477e950620815927820deed2f99b50d902537b46513c43e669dd97a6e7496b375b378
-
SSDEEP
6144:yFU0JdK4UYx4x85jp/k9NqwNEhIo4esFEjUsbp:KU0HKu88t5kfOdzs6jfd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/batgba.exe
Files
-
batgba225b.zip.zip
-
batgba.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pec0 Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
batgba_readme.html.html
-
dbg.zip.zip