bcf9e677d6bbbc1abe21874c26e136ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf9e677d6bbbc1abe21874c26e136ff
Size

63KB
MD5

bcf9e677d6bbbc1abe21874c26e136ff
SHA1

aa13974baaba3c095f1b287edb81fb84a95307f2
SHA256

18bc486d8a0854e81f838cd994827ee63f0b80406d5e8028a296977a6e11b3bc
SHA512

2f4337456f9137754544bf38656f87827228d802beb69672751e3475f04fa734c868b2262b32c201e7a6503394067f21bd1e7eceb0a6bd795c308a582f14db0a
SSDEEP

1536:Qe4R4tabitwUEMqydSAQ7Vw12TdWvCA39Yu9+FxKt:T4R4Rwi3d7UzTdWJ3hUHk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf9e677d6bbbc1abe21874c26e136ff

Files

bcf9e677d6bbbc1abe21874c26e136ff
.exe windows:5 windows x86 arch:x86

59b815b9c014d2e8448ed6566a1f6fb8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\Boomer\Select\Intro.exe

Imports

shlwapi

StrCSpnA
StrCmpNW

kernel32

GetWindowsDirectoryW

Exports

Exports

?BallHeight**YGPAXU_POINTL***Z
?DestroyTarget@@YGPAXU_POINTL@@@Z
?HeartPulse@@YGPAXU_POINTL@@@Z
?RedirectPointer@@YGPAXU_POINTL@@@Z
?SomethingUse@@YGPAXU_POINTL@@@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ