bf3cbb3274003d83659268b74b477a77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf3cbb3274003d83659268b74b477a77
Size

71KB
MD5

bf3cbb3274003d83659268b74b477a77
SHA1

4f85ac1006e46f346878e5effa87eff5f6e1a3ea
SHA256

983efbb46329b97c04bb9be6418b3dafdb91fe21ff4bb3ceae8b4eaf4b4cffc3
SHA512

e4e663b1d18ddd64c51a524c6c658b3767a13e755f143dc9552eb43767a31a7dd44bcd182e8a629ddf4d2483e0162732cdf311ed9e219d2bcb99873dbf29f4cf
SSDEEP

1536:1axWkJF2CLOht8/pzTD5LrS8JBaytwkZas9So:1jEF2CQtizT48JKIlwo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf3cbb3274003d83659268b74b477a77

Files

bf3cbb3274003d83659268b74b477a77
.exe windows:4 windows x86 arch:x86

35347c755519b7d0311887e16c6cc7d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHAddToRecentDocs
StrRChrIA
StrStrIA

kernel32

CreatePipe
TerminateProcess
VirtualProtect

Sections

.text
Size: 38KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ