bfc94023d980bcc85c784284dc8dfaff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfc94023d980bcc85c784284dc8dfaff
Size

118KB
MD5

bfc94023d980bcc85c784284dc8dfaff
SHA1

eb6587a40b6417b6e67cdb35c39b5c6b06a13d04
SHA256

2ebf6eee4ac30bbba5c0660733bda8038dc8ec0e6aa3886755a9ff3f0dc08372
SHA512

f6c25bdd5fbebb75b5beebbab1858ba7264467e9d4df83917440ca757b27d41bc468fb1307b260ec3e9249c7aeddb95e5f0b53fdf17e3e3acd47cf381de49413
SSDEEP

1536:pD8NU1i2/QA+SR6OS5BSnRMbEdZppGaXDT5EQO4/JbEdPo0Ad4dk16nEnKdXL4Zm:pANYTQYMt2RJvDT6QztEBsEkgEnKds0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc94023d980bcc85c784284dc8dfaff

Files

bfc94023d980bcc85c784284dc8dfaff
.exe windows:4 windows x86 arch:x86

75d51ded99ec29ef4dfb74a865009671

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
LoadStringW

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 113KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ