setupBNServ_GB_20150521[.]exe | Triage

Sharing

General

Target

setupBNServ_GB_20150521.exe
Size

3.3MB
MD5

4b8919c5bf24af81554b82238f692170
SHA1

45ed54a77ee31273286e5e8e0d979b5ad52a0354
SHA256

9c9e9f8048b6a6fab801307e9c99019b308b399a695c663dc6d9425ed6a201bb
SHA512

e0a021153757353e03d8d62d34f70c8eaef70ed54b1fad3776a8c18d2e4e41b1837a1ba26cdff1f7acb72269ed5d80483a8889ff7edd09f2bffd3b582acea0c7
SSDEEP

98304:oVBj66eSnLCHUk5eycszJZlheAuWHT+bMQflnAg:iB9LO53csh4UHT+IQflnF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
setupBNServ_GB_20150521.exe

Files

setupBNServ_GB_20150521.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ