Behavioral task
behavioral1
Sample
2025-03-30_642f571f3290eb6f7340f708654623ce_black-basta.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-03-30_642f571f3290eb6f7340f708654623ce_black-basta.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-03-30_642f571f3290eb6f7340f708654623ce_black-basta
-
Size
18.6MB
-
MD5
642f571f3290eb6f7340f708654623ce
-
SHA1
486c5c01c61d1588a273f00976b12e85c7804d79
-
SHA256
6d63f87c804c21583c292e68471c7ddd97734960615eb515369e3a44ec775864
-
SHA512
3b352f616a7df689ecc53ef6762acb9c80db60adb87b78b785c1b10a96c670c993eeaa851a1e3c15d3324b4ae64c78ab22fcd9353c47f83c3316bb640d5926c4
-
SSDEEP
393216:EvrUXNi5ShR4uwohGaMntuZ/lZ0y8sfBIfNCLxKg5wQ2z7hR99gzaZf2Mf/g:EvrUXN8Q2eQa/nbLpIfIxKgaz7j9SaJ4
Malware Config
Signatures
-
Detects Pyinstaller 1 IoCs
resource yara_rule sample pyinstaller -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-03-30_642f571f3290eb6f7340f708654623ce_black-basta
Files
-
2025-03-30_642f571f3290eb6f7340f708654623ce_black-basta.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18.6MB - Virtual size: 18.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Startup.pyc