bf0a1f4c6034ed9e4fc8f982df3bd8f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf0a1f4c6034ed9e4fc8f982df3bd8f5
Size

423KB
MD5

bf0a1f4c6034ed9e4fc8f982df3bd8f5
SHA1

de2a349079e29b1e3e628a842604fa56226a6b1a
SHA256

9258886d6b3f8db790bd952d832fd8a2a6c43e116ba2c4ff92b5777f497b67b2
SHA512

46a2dc92a32ac63b41a63a7d44f80bf28dfdff5fb112a8a2cb99a4b729dd91fcb61e18ad851e00c564d66c3f4da3f5a970e7f2c03fbc9e3ab10be6bcc04e9e7b
SSDEEP

6144:lVa42ewMEOdIGF0qzd4ejRkNA1UpZLbixTNTJT:+dFMZXZ+ewtpb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf0a1f4c6034ed9e4fc8f982df3bd8f5

Files

bf0a1f4c6034ed9e4fc8f982df3bd8f5
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wiaacmgr.pdb

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ