bdfa9d0fa4ea9944549eb8a1ed7ba390f9c905d7f6f546aa8d44b24fadb81cc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdfa9d0fa4ea9944549eb8a1ed7ba390f9c905d7f6f546aa8d44b24fadb81cc1
Size

6.9MB
MD5

3b59c985527be97aecfea85d1b523c79
SHA1

df6ff250596e2b02ee3f26f132440ae245726873
SHA256

bdfa9d0fa4ea9944549eb8a1ed7ba390f9c905d7f6f546aa8d44b24fadb81cc1
SHA512

8cb76f85a8499774e9928c07a2caee4f47bfa4ef60f833a6a2509e2154e3b1ee087d1096858428780aec234dbb8bd30eb624b22035df443d460a608ec98becd1
SSDEEP

98304:4+koiRLFdsODKUdFxQ8k618KzAYYC9z3Bbgtev25o40nsZJjNw5MQNiEU4P5EKHl:Jz25G6bV1yYDuZxCWQNhUU2uNzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdfa9d0fa4ea9944549eb8a1ed7ba390f9c905d7f6f546aa8d44b24fadb81cc1

Files

bdfa9d0fa4ea9944549eb8a1ed7ba390f9c905d7f6f546aa8d44b24fadb81cc1
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ