bugak_crm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bugak_crm.exe
Size

845KB
MD5

2b56389ffb5ec2ef022b911bf666c5f9
SHA1

3ae387c71c044ce222f3a88dd12a6dfb812297b4
SHA256

5d58dbfa846ca758fec64b49894497b7a553e3be7f7e317a65e14dc4121b69f7
SHA512

704a1c07e1d7fd97b9032f1117928e33f7f01652bb95d75272965090e3e590b5b822765919c51101e01fdd927eabe1dba9cb01bef0a1434c8446f086340c87c5
SSDEEP

6144:a8Vl98zzPSAF+FTg8YEldxQeCmdTnoUmJo2LG5yN0rodtzlEt836jNAmOflvSfg7:aQl1oVpWUf1jzn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bugak_crm.exe

Files

bugak_crm.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 822KB - Virtual size: 822KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ