bf3b79c1214da2fb07924ca0226c20c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf3b79c1214da2fb07924ca0226c20c0
Size

52KB
MD5

bf3b79c1214da2fb07924ca0226c20c0
SHA1

a164433580e0f9576de82f39c9501b171a8ce2fd
SHA256

eae1d1284a1e7878efde7160ac04548b1054b3efe571862a723da98f578bb908
SHA512

ae9ddfe5929ad4cbbe1b919ca745a44c84d8bf9a0afa13894132bb9fe8e756f880b3e3217e92dca8001e7b1e700cbf653aea58d67736fea66908df13913e7463
SSDEEP

768:2aoDNLWuAj2+xlU6phhq917Fo4zJr+8xUrY6kcWXue+fIpTYRMMMswY:2BoaGaMhs9RFoiJKjrY6w+fH6vY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf3b79c1214da2fb07924ca0226c20c0

Files

bf3b79c1214da2fb07924ca0226c20c0
.exe windows:4 windows x86 arch:x86

d704358ad9afd1684bafcb984f0b4148

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
sprintf
_snprintf
memcpy
malloc
strtok
strcmp
strcpy
free
srand
rand
__p__commode
strlen

kernel32

TerminateProcess
OutputDebugStringA
Sleep
FindResourceA
LoadResource
SizeofResource
LockResource
GetTickCount
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ