Static task
static1
Behavioral task
behavioral1
Sample
BARRAGE!.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
BARRAGE!.exe
Resource
win10v2004-20230915-en
General
-
Target
BARRAGE!.exe
-
Size
1.5MB
-
MD5
4852cafc10105271552565443137b323
-
SHA1
6060d3b9a7a3743350251d427e2d81760b54e418
-
SHA256
cab6bfe759af68e544a188683dc32028f0ab736cf98eef976a7c7c88746c1960
-
SHA512
37eccd19f5d47560cdd9b3e5ca69a1dfd8053c2794fc055088fde5a52901c6fe20d73267df6a07286f0853d6d2f25db86512cde480f11bb7f877a9625d93f3de
-
SSDEEP
24576:3y5m56DT/p29/ArZchiseGGw+opjDAfW9/u2TOg5GBdQS4cNxFY1:3emET/pK/Uch0t7opjDAo2JdS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BARRAGE!.exe
Files
-
BARRAGE!.exe.exe windows:4 windows x86
47c0a18c27cec8fed11ee3251bce264a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
TerminateProcess
WaitForSingleObject
CloseHandle
GetLastError
ReleaseMutex
lstrlenA
CreateDirectoryA
lstrcmpA
CreateMutexA
GetLocalTime
GetLocaleInfoW
SetEndOfFile
GetStringTypeW
GetStringTypeA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetCurrentProcessId
LCMapStringW
LCMapStringA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
FlushFileBuffers
IsBadWritePtr
HeapCreate
HeapDestroy
GetFileType
GetFileAttributesA
InterlockedExchange
Sleep
lstrcpyA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetVersionExA
GlobalMemoryStatus
GetSystemInfo
QueryPerformanceFrequency
GetTickCount
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
SuspendThread
ResumeThread
TerminateThread
GetCurrentDirectoryA
GetFullPathNameA
lstrcatA
GetCurrentThreadId
LoadLibraryA
FreeLibrary
CreateThread
LoadLibraryW
GetModuleFileNameW
WriteFile
CreateFileA
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
OutputDebugStringA
MapViewOfFile
CreateFileMappingA
CreateFileW
UnmapViewOfFile
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetSystemTimeAsFileTime
TlsSetValue
ExitThread
HeapReAlloc
GetCurrentProcess
TlsAlloc
SetLastError
TlsGetValue
SetUnhandledExceptionFilter
HeapSize
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
user32
RemovePropA
PostMessageA
PostThreadMessageA
PeekMessageA
GetAsyncKeyState
SendMessageA
SetCursorPos
SetWindowTextA
GetDlgItem
SetFocus
wsprintfA
ShowWindow
ReleaseDC
GetDC
DestroyIcon
GetSystemMetrics
DefWindowProcA
SetWindowLongA
ShowCursor
ChangeDisplaySettingsA
LoadImageA
SetRect
GetDlgItemTextA
SetDlgItemTextA
GetActiveWindow
CallWindowProcA
GetPropA
SetScrollInfo
SetWindowPos
GetWindowRect
GetWindowLongA
SetPropA
GetScrollInfo
GetFocus
DialogBoxParamA
EndDialog
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
SystemParametersInfoA
GetDesktopWindow
ScreenToClient
DestroyWindow
GetWindowPlacement
EnableWindow
GetCursorPos
GetMessageA
IsZoomed
MessageBoxA
GetWindowThreadProcessId
LoadCursorA
LoadIconA
RegisterClassExA
CreateWindowExA
TranslateMessage
DispatchMessageA
WaitMessage
FindWindowA
GetClientRect
ClientToScreen
BeginPaint
EndPaint
PostQuitMessage
IsIconic
gdi32
DeleteObject
DeleteDC
GetStockObject
GetTextExtentPoint32A
GetObjectA
SelectObject
GetDeviceCaps
ExtTextOutW
ExtTextOutA
SetMapMode
SetTextAlign
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkColor
GetCharacterPlacementW
GetCharacterPlacementA
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
MoveToEx
CreateDIBSection
TextOutA
SetBkMode
SetTextColor
CreateFontA
StretchBlt
BitBlt
GetDIBColorTable
CreateCompatibleDC
shell32
SHFileOperationA
comctl32
ord17
imm32
ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext
winmm
midiStreamClose
midiStreamOpen
midiStreamProperty
timeGetTime
timeBeginPeriod
timeEndPeriod
joyGetPosEx
mmioAscend
mmioClose
mmioRead
mmioDescend
mmioOpenA
mciGetErrorStringA
midiOutReset
midiStreamOut
midiOutPrepareHeader
midiStreamRestart
midiStreamStop
midiStreamPause
midiOutUnprepareHeader
d3d9
Direct3DCreate9
ddraw
DirectDrawCreateEx
dsound
ord1
shlwapi
PathIsRelativeA
PathRelativePathToA
PathIsDirectoryA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegQueryValueExA
RegOpenKeyA
RegCloseKey
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantClear
SysStringLen
VariantInit
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ