bf3747b614b0429f9d2b3c12f6f69e2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf3747b614b0429f9d2b3c12f6f69e2b
Size

39KB
MD5

bf3747b614b0429f9d2b3c12f6f69e2b
SHA1

b85b015a8a12b125d877d3fc0d493b68b5ad0c8b
SHA256

826dfd407c74792bd3aa0021991c0fc68ed56b81c3ed942367e8b86e05eae80e
SHA512

d61afa12b3d78ef59bb3560b82c234f9975d9bd3c71dd76c2c51aa73a03f8fa6023e71169c889097fdc0bd075c4ea0f3c0857929150e8667d6ee50db84d10791
SSDEEP

384:M/JWEllANvQTOznKifzHvcbI3xvxTAISJb0+g5Huo6v42ia/H8FvBpOFd60z+wZx:vElsBDZpweh4AvakFZIL8WiYRT+M5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf3747b614b0429f9d2b3c12f6f69e2b

Files

bf3747b614b0429f9d2b3c12f6f69e2b
.exe windows:4 windows x86 arch:x86

7401930175fb1511c6ba88ddbfbc5d08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegQueryValueA
RegSetValueA
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyExW
RegSetValueW
RegDeleteKeyW

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ