bfe28b720a827db8ba9cc8654930f9a55b0bee968010d0d17d992fba13c98567 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfe28b720a827db8ba9cc8654930f9a55b0bee968010d0d17d992fba13c98567
Size

17KB
MD5

017e9df1a80b50f2dfc8e466c2a93c6b
SHA1

1441e3beab5dbe9cf5e3555dd395778eab8129e4
SHA256

bfe28b720a827db8ba9cc8654930f9a55b0bee968010d0d17d992fba13c98567
SHA512

3fa554008dba58744697932418d7aae4842446bf20f2803db8183400ca7bec1f3564a70bba50471d11369387667c9ba48e840e6bb61f96d1bf274f70cbf8c77f
SSDEEP

384:M4XTfbnjvr+ZOMwFgvTevT6u/oXf+iaAdHtx3jcjf/7zkbIhEn6I4mN:MhtLG9eHtx3wv4dnz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfe28b720a827db8ba9cc8654930f9a55b0bee968010d0d17d992fba13c98567

Files

bfe28b720a827db8ba9cc8654930f9a55b0bee968010d0d17d992fba13c98567
.exe windows:4 windows x86 arch:x86

944f15cc6a14b0d6381c8099770e3c37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 299KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ