bffbe3d33b81e72be97cab2bdaf1500275523f964fb95c0c330de60279b20605 | Triage

Sharing

General

Target

bffbe3d33b81e72be97cab2bdaf1500275523f964fb95c0c330de60279b20605
Size

8.8MB
MD5

90edcc628fcbb730078d988c74d1d674
SHA1

6b4d1c85f185bc5de99cd12c9dcd9d06de193e36
SHA256

bffbe3d33b81e72be97cab2bdaf1500275523f964fb95c0c330de60279b20605
SHA512

51f411c044b799e6a7fd01b386f04f70e0c61482f52253464ce030b5d599f1b76c5207d06da19b47897810006cdd213f074c0fb4667d6d76b466a6c5987ba79e
SSDEEP

196608:d+p+KxhZ0olCUpygrdaKPMYZL6yrQSFyMYjuz+xxW7FCBezToy:7C/CGyg/1L6yrhFyMUy+x88Mky

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
bffbe3d33b81e72be97cab2bdaf1500275523f964fb95c0c330de60279b20605

Files

bffbe3d33b81e72be97cab2bdaf1500275523f964fb95c0c330de60279b20605
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ