bff42ee8244b9cd87c809bb78916b615 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff42ee8244b9cd87c809bb78916b615
Size

4.3MB
MD5

bff42ee8244b9cd87c809bb78916b615
SHA1

57da3ae807936ebc32d75ff6652e823b259e859e
SHA256

6998e4ef0c26dd9981ffbf517f89c0362d195c94c4a513c852d71e707bd6f358
SHA512

1e59e2e0122e62d034773be3f0ea960fd2421af127360a708b40166225702197afb037873abbaf11c6ebea21b10507de1856104059efcb93847f74fac27c8279
SSDEEP

98304:CBXg6vGm/0WEdENvp37srV4RZg6vGm/0WEo:Qg6vGLWEKf4Z4bg6vGLWEo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff42ee8244b9cd87c809bb78916b615

Files

bff42ee8244b9cd87c809bb78916b615
.exe windows:4 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28B - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE