BRATS V4[.]2‌‌[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BRATS V4.2‌‌.exe
Size

9.6MB
MD5

cce2945fffe05fa937a179c864324569
SHA1

c1056c2e71c646b521d11ac6eb0bf2b5e57e0396
SHA256

25e2ae131e39eed857cae4d887cb199bd2805cd51b7549eb143a704c3c04ecc5
SHA512

0069745e3f0d74e91c346494a20931fa694ca21225acbedf95d5d1ddb6e7f81ac5dda9dfcc9a6e89ad54813ac3e69289714348b17211a95f25c43b0ac8714d4f
SSDEEP

196608:Zxma6TVvueQBN7l6zrGgRYcZNWnmr2+EzXWLLYPm5ww87XUbmOVsXz/G:9zf78ZacZNW82+spwvsNXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BRATS V4.2‌‌.exe

Files

BRATS V4.2‌‌.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.6MB - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ