Butterfly On Desktop_1[.]0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Butterfly On Desktop_1.0.exe
Size

6.7MB
MD5

b0a46bdceec5b9bee139749a207ef7f8
SHA1

279d59a3dd772d97f47f9516c897b3dd42f742c0
SHA256

78fe70328471cc2149ef0df79215f10cb53c4d32dd4193f39c50abbd9eab2eef
SHA512

c966dfb9ad965964355334a7b486c2e220159c8396964ddb91b6bb42caee306d2fb263802b36fd2550265d7db30220364016bfaef39fd58921dce0093e3b62c7
SSDEEP

196608:wjPllBkm9+zoSfSOspbLik8S6sB0UzXFNfj+ugK:wj9Im9+MISOgbLikn6L4X/hH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Butterfly On Desktop_1.0.exe

Files

Butterfly On Desktop_1.0.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ