Win32[.]Bagle[.]CY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Win32.Bagle.CY.exe
Size

34KB
MD5

0c7f27ea7ecb0e0f2488da9bc9b37e34
SHA1

6100aebd0586e39395b25f3aa2188c3a68628d06
SHA256

7b7145322adff6b97ec7b5a34940f635427d606c97398d0a9345fdb6c2ee72bd
SHA512

358975677f6b2a25609a63d0005ffb1415af49942e75c88809c1dc097f27db1b939aba338bca3b22242f13501e2808ddeb76cf445d58633a82abd46a5d801e50
SSDEEP

768:9r6ITq+aJe1mgawzxsUNCub8PC4AjIHxATVGuuFhabzo3I:9rRe+aJe1mgawzxsBub8PC4AjIHxATVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Win32.Bagle.CY.exe

Files

Win32.Bagle.CY.exe
.exe windows x86

18c8feeb8262906e2a2dc356a538b424

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 838B - Virtual size: 838B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE