bfae7912e3a26414066fa5e9d6a0aab261dbe9d051e5173954c115fc08aaf3d9 | Triage

Sharing

General

Target

bfae7912e3a26414066fa5e9d6a0aab261dbe9d051e5173954c115fc08aaf3d9
Size

3.4MB
MD5

044c5bb9aeb4a5625e79abe7552da8c1
SHA1

1b64ca0f7324d3ebb1dbd8571694d40812c0e5f1
SHA256

bfae7912e3a26414066fa5e9d6a0aab261dbe9d051e5173954c115fc08aaf3d9
SHA512

b8f174d552ce145e81662dd97a07d6dd5515c20a076b46ab20a36773e32d437dbad84c66e3fcbfe16a46440fc3abe48b73233f1b9745b5c5fbe51526560d9d84
SSDEEP

49152:KnGQtVwkg26gkTSOa0nakDvmFGi4OwfsX5ytPrIcF3dtaSCrLsx6bFQniBTsYr:LQtukg2ABfi4a5y73dYryQ4Yr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfae7912e3a26414066fa5e9d6a0aab261dbe9d051e5173954c115fc08aaf3d9

Files

bfae7912e3a26414066fa5e9d6a0aab261dbe9d051e5173954c115fc08aaf3d9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

VProtect
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 2.8MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

VProtect
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ