bff756d09543bbeef56fb0b645a6cddf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff756d09543bbeef56fb0b645a6cddf
Size

691KB
MD5

bff756d09543bbeef56fb0b645a6cddf
SHA1

7bc863b7532a7963a662bbcfafc82f0b4de33bc9
SHA256

8fc70c70409d94b51badcd59c66e5de9867628136909ee56fce254331da5a15e
SHA512

cac27f407ef08ca13e432d2fb8c3723d0de5a09ba5075ae2e67f2b2f9fa0e505fed24836f16b0fca5578c3f82df61a3b91b6d75d912ee713f95d51f5fa24c969
SSDEEP

12288:fzWYQ5rVO0EDgsMIj6tGJS9GFppppoT1aq0wuEuBuQu0UB:fzWYQ5x5Mgs2xGFppppoRaq0euwbB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff756d09543bbeef56fb0b645a6cddf

Files

bff756d09543bbeef56fb0b645a6cddf
.exe windows:4 windows x86 arch:x86

6d7f9bd4aebd3d416f7f2a4223602909

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetVersionExA
GetFileSize
Sleep
FreeLibrary
GetCommandLineA
lstrlenA
GlobalFree
GlobalAlloc
lstrcatA
lstrcpyA
GetModuleHandleA
LocalAlloc
CloseHandle
LocalFree
CreateEventA
GetStartupInfoA
GetTickCount
GetLastError

msvcrt

__setusermatherr
memmove
_initterm
_XcptFilter
wcslen
__CxxFrameHandler
_controlfp
__set_app_type
_except_handler3
__p__fmode
exit
toupper
rand
_c_exit
_exit
_adjust_fdiv
wcstoul
wcschr
__getmainargs
_acmdln

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 673KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ