Static task
static1
Behavioral task
behavioral1
Sample
MalwareBazaar.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
MalwareBazaar.exe
Resource
win10v2004-20240709-en
General
-
Target
MalwareBazaar.2
-
Size
661KB
-
MD5
da11b482d303a67c73a79dd6f3d8736b
-
SHA1
b10147c106db52d75943daa0437e43a66edcae7c
-
SHA256
79c33f8a4caad1ef7a4af4ecd6719210ceee458fa1e811b8dc94d9d8d4114a23
-
SHA512
264494f81df4ceac38837818d6bc7673cef50a30f3f6fae2ef28e957d913a1b754e841859da44ba7d926cbd80c4805e59ae3cdcdb60b7ddff0925f47ec17e2fc
-
SSDEEP
12288:Mv1V9TTKZunttzm3ulP+bM7DibSGyQHsNks6bg7OjzyNe1zD:I1V9/KZunjK8P5Kb8kC6s7mmNe1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MalwareBazaar.2
Files
-
MalwareBazaar.2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ