Buni[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Buni.exe
Size

525KB
MD5

d7494334478e806ce5cae341378d608c
SHA1

ce3f328b3906c98dab7bcef4207faa325df972b6
SHA256

6eeb98a459b751958852c0072505e5d187b5473759dca00ef259065c914332a3
SHA512

30e3747b3400f71537084bdb31dc1f7570bfd0df403eae5fb11ed0e1c13ac19866e924d50ea75968f4f9bdff2595465be3a6461a3f9bc328f7ab51ab5faf3784
SSDEEP

12288:/VMRs+xI2T8ZJDDbrpsLCqxa78PAKuUHe:/KRG3NC+8YK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Buni.exe

Files

Buni.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 523KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ