BPMPlay[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BPMPlay.exe
Size

1.1MB
MD5

f08b457296d5722d72ecd84ad0d3dd50
SHA1

779f650b5825b351e9ad1018103821c7d4403f43
SHA256

bd6961b640428b98d74a97b12ff8e7c90c582556a4cd58abf328a07ebae8879c
SHA512

41c794c79acf9965e6bc1f372a06b13cc21963b7e5459dda246fbf352095f005002908c12cece21d2b07de5f6e0047bf3b994abddb25124fc25e857411779cb8
SSDEEP

12288:G0nB4CrsLRbQACTdgHC7RpawtLQsNZsWTlynvgqn3WzuqseNkLcgf9oJQZnlAoj4:L4msLGm2RpamksNZ1lQUNDa9oJQZnlA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BPMPlay.exe

Files

BPMPlay.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 860KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 38KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ