bf58cf7724c49edf5854b7e1d163ffe6 | Triage

Sharing

General

Target

bf58cf7724c49edf5854b7e1d163ffe6
Size

94KB
MD5

bf58cf7724c49edf5854b7e1d163ffe6
SHA1

e33c3206768be7deac3c391510cfbe99383fbba6
SHA256

0baf55f28723ff2dd2bbf1f5827b62f8b7ea54f80fcb7f481d404648315786fc
SHA512

69eff2bff24c7f06affc51da9c16136f3ac8c0cec162e41d583efee6161bacb5902c2462988eab9d8b5883ac49de4d6deb387df7a0a80f26ffa7cba54e061da1
SSDEEP

1536:XhosGId0TsPlAvYpPvK4gvI5piyAZc8YaEJwZK4/83ZoMOALF6SSf:XTGIlPOvY1FgQ5kpZhZEXtpxLF6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf58cf7724c49edf5854b7e1d163ffe6

Files

bf58cf7724c49edf5854b7e1d163ffe6
.exe windows:4 windows x86 arch:x86

66bade9f11b425de003317d59d5101e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleContext
ContinueDebugEvent
UTRegister
SetThreadContext
WritePrivateProfileStructA
GetConsoleAliasExesLengthW
UnmapViewOfFile
_hwrite
WriteConsoleOutputCharacterW
FillConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE