BnSPVP[.]Launcher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BnSPVP.Launcher.exe
Size

3.7MB
MD5

dfff8515ddc69c7b5ed5ec12bb7d13d9
SHA1

aee62a1cc2191a794098d46f8fb7c3da03e59fd4
SHA256

124bccf1e5e0f252b9d6185471bce1cf0f7f72f7d7977a8fc763ab96cb6d34f1
SHA512

59340994207107c1896dbf189f70ead97d81cc98b753c3e20a53416aaba5f07f1f1c62425aa2cc92214414ab082baed59956369d929092b32d84aa613d9857a0
SSDEEP

98304:XER5xtJbrrDdBzjYz067yqu/mnFQOi33nFbO4KSgPTPgS8NAvKBUuYDcvwu3707b:ULrB3Dg2H1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BnSPVP.Launcher.exe

Files

BnSPVP.Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ