bf0b397d99dccbe3c319bc4399d94458 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf0b397d99dccbe3c319bc4399d94458
Size

32KB
MD5

bf0b397d99dccbe3c319bc4399d94458
SHA1

b2d806b92b0fa0ac6fe98979cf83456e24c8343c
SHA256

3f912ef68ae7887f98c99259be68acbada98b35a8df98317fd7b5b54727b1927
SHA512

e9ef386d2cdd2c470c1c204496f932ab376f6153aae5dafc20528fcd73ca398f2f0fce512ea6bec5179d30d484cdab5a89da3541d2036d7616dec8bacad65bdc
SSDEEP

768:RelFTXgki5T5ZxALSpN/9rcMN/8zwbHozfoXNS:YFEz5DxALwjN/80bHSoXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf0b397d99dccbe3c319bc4399d94458

Files

bf0b397d99dccbe3c319bc4399d94458
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ