bf5050ad95e0b17350a826cf52c74176 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf5050ad95e0b17350a826cf52c74176
Size

129KB
MD5

bf5050ad95e0b17350a826cf52c74176
SHA1

7233d1f97af524f517e1242b46b4a14cbd430df5
SHA256

98bd676c47be2060dd21a8a75a2978b9ec9ca6e881d5c8a0c9281c7daaf13df4
SHA512

590954b662f753e84e08c28ea873ffcc07cd521a35640eead29fb665f91819a885735063f56793d14358d8f80c82575e9e15553f44394ed516f238125fd6c404
SSDEEP

3072:1RwFWqRKBAG2SvpCUNcjLBH0K6YAjPkd6e:QKBTDpILp0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf5050ad95e0b17350a826cf52c74176

Files

bf5050ad95e0b17350a826cf52c74176
.exe windows:4 windows x86 arch:x86

130dbd876acf5d6c3afbf29faffae1ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
EnumResourceLanguagesW
EnumResourceTypesA
ExitProcess
GetACP
GetCommandLineA
GetDateFormatA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTimeAsFileTime
HeapAlloc
InitializeCriticalSection
LocalAlloc
RtlUnwind
SetLastError
UnmapViewOfFile

user32

ShowOwnedPopups
RegisterClassA
OemToCharA
IsCharUpperA
DestroyIcon

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyExA

setupapi

SetupGetInfFileListA
SetupFreeSourceListA
SetupFindNextMatchLineA

Exports

Exports

Ekte
Lnklasbiz
Nbi

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ