Behavioral task
behavioral1
Sample
8be672e2d623d6030b6420c3583ee0d98d7ab30f1126da69e0bf8d337e9e33a4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8be672e2d623d6030b6420c3583ee0d98d7ab30f1126da69e0bf8d337e9e33a4.exe
Resource
win10v2004-20241007-en
General
-
Target
8be672e2d623d6030b6420c3583ee0d98d7ab30f1126da69e0bf8d337e9e33a4
-
Size
17.6MB
-
MD5
f7fefddb5862abe0fbf40142476d159a
-
SHA1
0ee43653950f32f69f7d824623990b5a505e5821
-
SHA256
8be672e2d623d6030b6420c3583ee0d98d7ab30f1126da69e0bf8d337e9e33a4
-
SHA512
1589e44fca6f3b253f99adb3ba732cf42165fec0bef052583bb27d1c87b7e45c5d7ca702b0ec9374ceb76a6df124ad7d51f5349be0f61e9c1da5e5d99e9ebc23
-
SSDEEP
393216:q+TCIHS4y0WyNUHKoc8tQsvcsM0wZzRA/Wbo:q+T77yx9Hpc8ast85CW8
Malware Config
Signatures
-
Blackguard family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8be672e2d623d6030b6420c3583ee0d98d7ab30f1126da69e0bf8d337e9e33a4
Files
-
8be672e2d623d6030b6420c3583ee0d98d7ab30f1126da69e0bf8d337e9e33a4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17.4MB - Virtual size: 17.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ