EF912F42DB99EB6E81730618C8267D2F2EF3FD91D636D5AEA962CD21DAE8BBCA | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EF912F42DB99EB6E81730618C8267D2F2EF3FD91D636D5AEA962CD21DAE8BBCA
Size

1.2MB
MD5

661155ec47a7bbf05f9c83b9e1ec4640
SHA1

9bfb82d75610f2ec5dd74c371c3c0e1a431fdf6c
SHA256

ef912f42db99eb6e81730618c8267d2f2ef3fd91d636d5aea962cd21dae8bbca
SHA512

f014169a98216e38541593bf35cb125751e55fad79dd6e446ccf510f497cd983303f46f806c9a8fc9ff1694c7a3d31a1d2b327ddc3a74053072e25f38804b093
SSDEEP

12288:6AfSo16ajfLYLdfmlviOuVdiLNr1aouD4Yo97jaRWeh3ih9HcA:6A6o1dLmuFi9fir1Y4/CBYTV

Score

1^/10

Malware Config

Signatures

Files

EF912F42DB99EB6E81730618C8267D2F2EF3FD91D636D5AEA962CD21DAE8BBCA
.iso
BANKUBER.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 717KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ