bios[.]exe | Triage

Sharing

General

Target

bios.exe
Size

11KB
MD5

4947bbea7829d84e405306175cb159fa
SHA1

b3b8f5b43e41ecbba35f04c16b964578b5c1c083
SHA256

4ac03a28ad39f04b02cabc654b1946b431ada3c5198a13e07515933f82c80be3
SHA512

265ff6398d64015da2da70f512c5f1386a98245ce4d6ac09a623aa805fadcb602453fa05c3a260cbc9eea18f13f443d0c2769851858392e38b92ae2c29d591f8
SSDEEP

192:QFrTzy8k0JMmx8O3napbCCePC1Eq8stYcFwVc03KY:uzrMmapbCCeUEqptYcFwVc03K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bios.exe

Files

bios.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.soar
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lmao
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ