Behavioral task
behavioral1
Sample
a5ef342482499489ef303c5f95a9684bff503a9c7c44b16572a4c7ebe60f1141.exe
Resource
win10v2004-20240226-en
General
-
Target
a5ef342482499489ef303c5f95a9684bff503a9c7c44b16572a4c7ebe60f1141
-
Size
393KB
-
MD5
2b22bd7790dfd1f241a512918e814133
-
SHA1
bcdb2f6cab3c32d0382dd8d09ee7ab8ce9ea037b
-
SHA256
a5ef342482499489ef303c5f95a9684bff503a9c7c44b16572a4c7ebe60f1141
-
SHA512
38e64215b9561267322e2724d0e1d994015f88c2b3b2e7fbe3fafc77cbfd92f17ef3fb994e8a8f1e3a020972241ceaf5f77a7888de1a81e019722566c9005184
-
SSDEEP
6144:p/SZwCDkBDKpVtXIoEpGy8Un02o/7U9398hBg9w5Jq/lJwam9erm7Tu1E:pDCYBDKb2Gy8Un02oTURSY06w1AT
Malware Config
Signatures
-
Blackguard family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5ef342482499489ef303c5f95a9684bff503a9c7c44b16572a4c7ebe60f1141
Files
-
a5ef342482499489ef303c5f95a9684bff503a9c7c44b16572a4c7ebe60f1141.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 390KB - Virtual size: 389KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ