bf05b243e1943e68b7b683e1a0b2e01d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf05b243e1943e68b7b683e1a0b2e01d
Size

178KB
MD5

bf05b243e1943e68b7b683e1a0b2e01d
SHA1

0a46491cff521bd56f79ddd8cf43ed6c56f2ab0f
SHA256

304e94d26c8083d617402a2f2e2e44173e1a09f6f18a0c49a460bf93acb16b40
SHA512

20129d6a739848c516120e7d6af5c5043119957acb8665f37161324d522807453d7e33111ed9a1d6cca49dba1c8a8ea51ead59ada0ed31e5ff6bd8a4193a61fc
SSDEEP

3072:y8O+BBk+ED+1sdY5S+KSxk5Od4+KSxk5OmbCj3YI+Fs/X+t5m7+T6O+Bn6r8ttda:T5B6UGqS+6Ou+6Ombm+FiXOYA+B6rCtQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf05b243e1943e68b7b683e1a0b2e01d

Files

bf05b243e1943e68b7b683e1a0b2e01d
.exe windows:5 windows x86 arch:x86

a5d0a2aac03bc6c551fa83bbdb05cf98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputVDMA
ExpungeConsoleCommandHistoryW
GetStartupInfoW

user32

MapVirtualKeyA
OemToCharBuffW

gdi32

GetCharWidthA
CreateFontA
LineDDA

Sections

.tls
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ