bc9ba8017aa857dbf82f32186f7288e2 | Triage

Sharing

General

Target

bc9ba8017aa857dbf82f32186f7288e2
Size

170KB
MD5

bc9ba8017aa857dbf82f32186f7288e2
SHA1

bb317f6106c8169c84a2644568e3c0313f17a838
SHA256

e54ba544ccc2ca9fe6df97d6327f17a0970d476173e4320677fe7ce58c492b4f
SHA512

1210bc3343fb97260a69377d933e9b3e6f72d3fd81f395b0a32e42a0c4dc5e03b942223744a5da54e0a66f811ada74ca7716848a91454e3b64387f020513186b
SSDEEP

3072:1E9nrc9n/77b8r4ftf9mQdedR4FrgKaVrJ9YbjDtVcF91NaNShzP2+QJEtDxu:1Cc9/L8EtUfIUzfYjDtq91NKl2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9ba8017aa857dbf82f32186f7288e2

Files

bc9ba8017aa857dbf82f32186f7288e2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Aiu@qnn_2

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 325B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ