Static task
static1
Behavioral task
behavioral1
Sample
MalwareBazaar.exe
Resource
win7-20240708-en
General
-
Target
MalwareBazaar.2
-
Size
972KB
-
MD5
d2b29c83a5ceb13f604c4e1481938437
-
SHA1
a2f483d069d3d378b393c675260b417bf2262c19
-
SHA256
a11fc46a492edb3f53615fb17ed37b26a9bbffa286a757d28fa235e1380a7c41
-
SHA512
3413e3ad041c58343bb21887ddce8bf548743683995a03a9ab11837ac2bcdd7f535cb6db3de1e31c4c7533287cb867aea9bb1e4dc33521d6bb1c4a62f2d14856
-
SSDEEP
24576:tykaGBejPZQxoqob+f78Y3/Gz/941HJ/c:cN/jBQxoWfSmp/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MalwareBazaar.2
Files
-
MalwareBazaar.2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 965KB - Virtual size: 965KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ