bf9d51e7845b92c42be5e6c121ab6ad4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf9d51e7845b92c42be5e6c121ab6ad4
Size

643KB
MD5

bf9d51e7845b92c42be5e6c121ab6ad4
SHA1

f487855fed75561409c73eb5861ee40ebf80bef1
SHA256

002416fa405af459a45eb05a3f47164a7c8bbbfa625b1280739ab11414ba4325
SHA512

7d6cea33c9d02e2fbfddc9a9025ad70a92ad19c68b48023998fe1b5f807509745f9ab334305d00d52ce3c0f05cb14b316673c502be41db3ad598fbfc18f9f43e
SSDEEP

12288:ubv4Cr2R3VZovPVNBVoXIGHIPQU3Yet/zGKewXBF7LyUBasT8bHMtM:ubgxVm/3GI3t/zGKbr7Ll0/bHM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf9d51e7845b92c42be5e6c121ab6ad4

Files

bf9d51e7845b92c42be5e6c121ab6ad4
.exe windows:4 windows x86 arch:x86

7547cd08a992b687c417434c3b5c7770

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 609KB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE