Static task
static1
Behavioral task
behavioral1
Sample
BorderlandsGotyEh+19Tr_LNG.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
BorderlandsGotyEh+19Tr_LNG.exe
Resource
win10v2004-20240802-en
General
-
Target
BorderlandsGotyEh+19Tr_LNG.exe
-
Size
4.1MB
-
MD5
f55b9eae022bbb666d1a1ec180b00c48
-
SHA1
9590e112a6190ba6640fb61eb4c8ebf491dc10be
-
SHA256
69f5722dc008f6e676c759e35ec8df559302bd808607543f6c8efda14f2b55c2
-
SHA512
a144ff71b161b15e035d83e53d53fae095e6a46f1fcfc59221a4dd0e2e873602be5c351a2a2fc9e77b94aefb4256418ead0fc2cac32dd074365104b87a1e1ea9
-
SSDEEP
49152:T8/Sbb/LKDfkvNWpiTOMxoYGQlAkxpP2vrXG6+WZpU30PAEhHbyn82kk:ToSCkvLoYGQlAkxpP2vrXG6NTVg82kk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BorderlandsGotyEh+19Tr_LNG.exe
Files
-
BorderlandsGotyEh+19Tr_LNG.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ