bfbe94391dc7e0eaa1e59ae6d6029393 | Triage

Sharing

General

Target

bfbe94391dc7e0eaa1e59ae6d6029393
Size

1.0MB
MD5

bfbe94391dc7e0eaa1e59ae6d6029393
SHA1

67c27e2817d83786d95221ea4a02842847515f25
SHA256

94b71ee0861cc7cfbbae53ad2e411a76f296fd5684edf6b25ebe79bf6a2a600a
SHA512

4de8fa5bcba8db1cd052cf63dadca4a7f3f35213184f447cf00609b88a860de8926e15f054e9b0d534f5404025c36d37b99bec7a24ec251b217d9226939a6fe3
SSDEEP

24576:aoLLMmx1kMV8Om7LwFQqaRDl+iytYmcPcqd3wAIDQMi1hTQ3iweo:aykMbiLwXaRpyhqdwH+TQyweo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfbe94391dc7e0eaa1e59ae6d6029393

Files

bfbe94391dc7e0eaa1e59ae6d6029393
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 838KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ