be1cfa406d8ed5411a49fb64283c6a120e0c43a31df164acd8de332cdb89f411 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be1cfa406d8ed5411a49fb64283c6a120e0c43a31df164acd8de332cdb89f411
Size

695KB
MD5

1b4196e46a22f9eab189dd5e276f5387
SHA1

87764cdec781a49b57139a383f3da6c34b52b082
SHA256

be1cfa406d8ed5411a49fb64283c6a120e0c43a31df164acd8de332cdb89f411
SHA512

437d0a4e7c1ae28ba6492983fdd1a318a268e7a9a34cb4dbca935e66845ad1673799feb42d04ae7203c149d55afcc5f7f1914de64156225cb56a62e373be9921
SSDEEP

12288:LaDXoxxI5lAuwGHQO1iMA8EUY2OXTj8euFLoo9IIQ2mHevuDd53rD22k:eDXox2AujQHUUvPuFL3MFeGvrD+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be1cfa406d8ed5411a49fb64283c6a120e0c43a31df164acd8de332cdb89f411

Files

be1cfa406d8ed5411a49fb64283c6a120e0c43a31df164acd8de332cdb89f411
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BNma.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ