bf63f056b205407c6dca3bc0a8197c4b74e60237d0c856db7b56be3478daaba5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf63f056b205407c6dca3bc0a8197c4b74e60237d0c856db7b56be3478daaba5
Size

834KB
MD5

a5b4aab698d10a2ceaa18ce842dbe306
SHA1

3389bb67c93d5958ad695df65c1c214a3071dd21
SHA256

bf63f056b205407c6dca3bc0a8197c4b74e60237d0c856db7b56be3478daaba5
SHA512

fbd444b0e17a26fc90d06e709129ff52019c72e39b69f39e4b7de6bad8fe18f5fa027e098dfc84c7a18502d9f563c42f72a0a9cfff357d614461aeb0aecef0ba
SSDEEP

12288:2GdaJRuFG7ce+rUEjpnpWWLNO6MnUroAEOUAaEhySbo3Cp7UHuBOVWb:2G0ete+rUE9nMWBO6xVFTjyaZpw2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Receipt.scr

Files

bf63f056b205407c6dca3bc0a8197c4b74e60237d0c856db7b56be3478daaba5
.zip
Receipt.scr
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ