Static task
static1
Behavioral task
behavioral1
Sample
bRIg.exe
Resource
win7-20231023-en
General
-
Target
bRIg.exe
-
Size
36KB
-
MD5
51bb8006fbd5a7e3fdb25039da899bfe
-
SHA1
e7426837a470b3755a81d2c9fc7cb4e942bc9aa1
-
SHA256
041683719fb293be36ce1975a1bce343c8763cab7c5470c07264353d2ecc616c
-
SHA512
3d1fa432f8b7cd6dff9ff9ecf820b13c1b091a47e94628348c3613311a6ae23e512b5acf433eb20623e77b4453dc4952785d5af270724ca01a27c2ca2973744e
-
SSDEEP
384:zULdClEUdi/dMkt1QmY/GKSEZePC45SY2OzRLTm3yilqr64nbNcyvGb:zCUEUdi/dMc1tEZeK45SsbprvGb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bRIg.exe
Files
-
bRIg.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ