bWvmkyv4OpHFRlv[.]exe | Triage

Sharing

General

Target

bWvmkyv4OpHFRlv.exe
Size

545KB
MD5

991db15c5c2d3e4309efdf07f102f95e
SHA1

d6dd62b127b856cdb1d3beb9c7c4beb722deedd1
SHA256

005eb1d8df310f308e9ac99c488ea415174fd9aff3fc875117b056e535d08271
SHA512

94826376c1cdd91d2503464932645382525045971571ba1b5c49e548cccd39da1f7e757fbe5dfc5cabbfa09b3ca3567826dfda495b4dbc187b6474c44809f656
SSDEEP

12288:RYCv5qNEkrh8GUrZAgWhHpM36kiNISjea5BsIFqm4o:Toa3frmgoM36RISjeIzio

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bWvmkyv4OpHFRlv.exe

Files

bWvmkyv4OpHFRlv.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 543KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ