bf94751ac8834ae601380402a5da8a2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf94751ac8834ae601380402a5da8a2f
Size

112KB
MD5

bf94751ac8834ae601380402a5da8a2f
SHA1

915c11cd27f8934ceaf003392bc65ca7036c2da3
SHA256

7a16346db3f8234c7975f4d71442c9b554c328a76fecad4f71f1cbe16b955b0c
SHA512

2e0c67e5db3dbdf65a439bbdaa5e42d788feb2c8dfc0f51e148352d9a39da0e16926d4f6c7af17cbd46e7b668ed28278ce92cc46f9c9dc4257e6a27a6f556325
SSDEEP

1536:SxaIVyH69iVggOQoNAR18UJtx3yaJKLvk9xkpslPNjROgGwv/:SxaIVyH69iUAxTJynvk9UsrYHwv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf94751ac8834ae601380402a5da8a2f

Files

bf94751ac8834ae601380402a5da8a2f
.exe windows:5 windows x86 arch:x86

0d2bf9d7ff5b353fff841ec35f0f3b56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos
GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ