bf64f380725b2defddd3fca7a1b2eb5a | Triage

Sharing

General

Target

bf64f380725b2defddd3fca7a1b2eb5a
Size

771KB
MD5

bf64f380725b2defddd3fca7a1b2eb5a
SHA1

ae81d649b952420f8edcd9eed76ab12ebac7f403
SHA256

3b4bbb873b009a7c75622abafef758566a5aade0cb8708f7eeea3d194ea1ae07
SHA512

cea8ffbd0066bf5edc1349f8ec6732d9f290f133edaf8770f908b9880784606d4e81f452ed206427edb1b08a02bcccefd064c83bcadfc320836eafafb641d490
SSDEEP

12288:191WsIl8NNjtdQbB4MnqU7PFoOU2b10VHmDXTuFaa2AtyGTKOF25ZoJJyhRge8B/:tSIU942N28b10hJaothZ2/T6FBBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf64f380725b2defddd3fca7a1b2eb5a

Files

bf64f380725b2defddd3fca7a1b2eb5a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ