bf0dee690e4ddba356ebb6a12bb1c3bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf0dee690e4ddba356ebb6a12bb1c3bf
Size

2.2MB
MD5

bf0dee690e4ddba356ebb6a12bb1c3bf
SHA1

9d111fcf5148fac4410b74cc345471a050aafe6f
SHA256

5364c102567545df46d89df4b78054a738e7ec406e71b6ee02081a9e40b8a6d0
SHA512

dba9eb11bb6b6f53d93657b666facb6a52f5074c33be09da76ccb71a1d32f7ebf81fff1175a2a60acbf944841304b5a901d2c5ae08e404601750e792e6552f07
SSDEEP

49152:OEb8emZFsGQrHnhr6fBbdEWcPXfoLFr5MXch:OE6ZFUnhr6fPYaF9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf0dee690e4ddba356ebb6a12bb1c3bf

Files

bf0dee690e4ddba356ebb6a12bb1c3bf
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 1.5MB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE