General
-
Target
BNGateway Editor.exe
-
Size
213KB
-
MD5
88f2df159282a94aae31e93bb8ab36e8
-
SHA1
40c5e3d701dc445837a341e4a3042c7c74f5a760
-
SHA256
636359fa9454f485fc8006b38125244cc6ba4af0a92ecdfdb6accab6321885f4
-
SHA512
3f030f09da58ad9cb39b7b651283d9e67ae7e4d193505b5a0f28a387fc802a5b4c5e3d2f721950fe7b3a03dc6147a90a9ee5dcd5127c6ab2c2b38af4dffd67ba
-
SSDEEP
3072:HbMxd+piIuPCjIv6rEaRaYTnNAecLT7sawQoAd91RBOTcD8aF4maYoCcy1HsWpS7:7MxKiIIyreYTnaHLgYEHaRaK1Mdvcy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
BNGateway Editor.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE