BPO_GetInfo[.]exe | Triage

Sharing

General

Target

BPO_GetInfo.exe
Size

128KB
MD5

91660e67b6d3650038cfe1c7708e6460
SHA1

05c38b6b35fdd9b0a8bd08b023b94b0d93d709a7
SHA256

a7700991eda1d1f6b5542ac8854911dc5041fb4225963a8372d5926140187f7e
SHA512

06b8e631be197eb5546ed7ad92faaafc41a99d71614dc8b19259dcef1703975369108e59e58452d63c6d5b6504ae1e17f80b000b298ac5ae96eafb2be46863a7
SSDEEP

3072:rfLlyx+u93sMvVc3Dz5M79ZNgnipAZDdl40o2hV:rpyx+u2MvVWzuZNHKXO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BPO_GetInfo.exe

Files

BPO_GetInfo.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ