bff82fac15fec8ae83e96b2f0bbafa49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff82fac15fec8ae83e96b2f0bbafa49
Size

9KB
MD5

bff82fac15fec8ae83e96b2f0bbafa49
SHA1

3cca2d59f63f8e6be2a97c5d41bd9178530bf594
SHA256

1086c156c88f65a4dfe90bbf6b0dbc286f75ba730bf0453e30176a9b429365cb
SHA512

61d8209ce37aad497b1becfe2ace5b972e9b3f56e559cfee8c0585d1166d22d5beaf76e1979b206e7e0864fbd5ed5a36caac9f63c676a1e2e2bb1ae309f544b4
SSDEEP

192:dBksu/zHNQ4HeMZZ3993VnjdwqzR3a+k:eHzHeMXFnhwqlP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff82fac15fec8ae83e96b2f0bbafa49

Files

bff82fac15fec8ae83e96b2f0bbafa49
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ