LauncherBFH-Last[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LauncherBFH-Last.exe
Size

719KB
MD5

a2fd9f0e50ce7bdba610a94c6631029c
SHA1

666e589cced96647add94fa0d6e715d567a62caf
SHA256

fb8e948e91a2ba3f8405f21a234d23f8d64f39cb9b4f9cb2580d14b4732b4e34
SHA512

d2f15d1cb7026b8a842957ac8e5146eeffc7785d7383e58a2599d86720d1f9100152f7d96202eb8db10f8f4515e7037765d59b3a2833777eca9e8b8f814e1079
SSDEEP

12288:lhAJjgTqySggXAfMTtx8eX5VUQWwGltdfgmXShq4AuGXcB7:l28TIXOGXzLuTfdXSc3XcB7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LauncherBFH-Last.exe

Files

LauncherBFH-Last.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\86155\source\repos\AAAAAAA\AAAAAAA\obj\Release\AAAAAAA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 712KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ