bf69196d019c270f387d3736c96bc9a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf69196d019c270f387d3736c96bc9a2
Size

301KB
MD5

bf69196d019c270f387d3736c96bc9a2
SHA1

0af8af035b654294d9a28b398e84095b447a9619
SHA256

345f76f7f48ba5fa9f2c666fafb480461c3be51b650739b6e90c3271d50a7edd
SHA512

db388c198ec2acc89251c76c37dddab2c6501004fe43f9a16d6e0797d29f365d9946558681b0564e0b77424ae1cdb338f88bc955415eae63a0f99e5721d2de3e
SSDEEP

6144:BtuIDeAWxqdSzVWPu7g/Hc2dwv/rCPCE+nPTzojQNHJCOrZUDfQ6w6Bumd01QF:BttDT8Qt/Hcmwv/rCK1nCQNHJjwsmump

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf69196d019c270f387d3736c96bc9a2

Files

bf69196d019c270f387d3736c96bc9a2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE