Static task
static1
Behavioral task
behavioral1
Sample
bTgH.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bTgH.exe
Resource
win10v2004-20231222-en
General
-
Target
bTgH.exe
-
Size
26KB
-
MD5
6cac482574d8709b1cdec7bffc783015
-
SHA1
a1646e0e23c2107847606e1b79ce48da01d0fcfa
-
SHA256
7e1441a69d94d63e8038883c2e11640b9184e88e3106c1f599fd52fa11f5797f
-
SHA512
12b6f59d5c31dd958e03a0573b1474a73bbcef2d1bccb85b173b0f9b2cbc287ee5649bdc2f7a707ca2a88491021e8f42944fc84a4c886695ec9c0cd69a04d916
-
SSDEEP
384:aLduRmIf+kg/3AGeTHzCYe/8Y2OzRLTm3yilqr6IwbUtVvGz:EA7f+kg/OT5e/8s39VvGz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bTgH.exe
Files
-
bTgH.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ