bf13affb8dddd954df9e049b0b5850ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf13affb8dddd954df9e049b0b5850ca
Size

404KB
MD5

bf13affb8dddd954df9e049b0b5850ca
SHA1

19e37d73111318fd88e491783eac01c57ab1e015
SHA256

6e007247dd7db2d8d09d2b8bad6faa306a612885961b744674f05ef4bb31701e
SHA512

047627b76de164de1b4f4c79aa17012639707073fe796ef99ac0a43bfad65ea2c2846e00d4972e763fe3e86ab7fd07e83f25c12cbd0be4c3c553d04448fd00a1
SSDEEP

6144:pRQ3qwTOaAg6DvnPUgh+D6zuQesKL2PyGFDTuXrOZf49aYYb3vePIGA24:paawTOFg6DvPR+kuQesA2jfMe8Hgehq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf13affb8dddd954df9e049b0b5850ca

Files

bf13affb8dddd954df9e049b0b5850ca
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 320KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE