Static task
static1
Behavioral task
behavioral1
Sample
MalwareBazaar.exe
Resource
win7-20240704-en
General
-
Target
MalwareBazaar.0
-
Size
2.6MB
-
MD5
89043de1690eeaba17df956f701269b7
-
SHA1
ec42ec5d9fbc0bd22a1ab1c2b1e8f1dc2cf9bc42
-
SHA256
87d56ef3f76d966ff4dbf9d4bbc4d8a66c50eb6bc4181c282daa262a4044b367
-
SHA512
82af1b88e17e332e517871b0b8ce8501e4a5c1669dfe936dbc3212c73833e519a0871b250144194e0840d0578338abfd169504d4a123d745db0168a054aec349
-
SSDEEP
12288:Ch7KOjdy7OPHVoVt3Q2MZHfgg+D5UNNniyN0k1yCNXCcXaU5VN9RbH:yKOjibMAU/ik0k1ySauDH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MalwareBazaar.0
Files
-
MalwareBazaar.0.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ