bnkextr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bnkextr.exe
Size

8KB
MD5

a996cc586a0f80651b546e2e461db20f
SHA1

d9c9decb7f62dffce8d8c4e132ed30dde3a2c5bb
SHA256

1abf2999149755cb34e08bc084f6cb770f212dd80ef1c78d62cc440c4b4d9c8f
SHA512

25621bf30c7e6fbb7be5394e69f69bf7efd8212e9d7d2fe5b3c68e03c05772f171a85b18e4d94b501e6efe892d9315dbecce31f9b7f0594fb6925a00b20d9b5e
SSDEEP

96:gA6/yKoN1nwOw3M/8kb63fWKhHKHANvQqNPOceqmCAdyK:tbzNws8kb63nqgNvWcgRAK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bnkextr.exe

Files

bnkextr.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 57B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ