Byefron[.]exe | Triage

Sharing

General

Target

Byefron.exe
Size

460KB
MD5

4a7c3260d371d88cc808a70ad51c9c85
SHA1

40776b398cc04085266fa3155c030bf06bec199e
SHA256

82b9bc35a4c6108977fc777359da50fcce21fa9a167962ab36f3beffd3050ee3
SHA512

b093c0d216ddf9e8294368bd8bc2f74ef6ac1d0566cbc03e815804fdc90996870cb4ccdf1dcd48cfbbc5ec1651365dc3fe8ccc05b6af1b1b173ec2cd5d2ff60e
SSDEEP

12288:Ehv4QDPIjahmjQyDTZs4hdnc7g4hdiEl4vH55OKGWN:E5DDqQSs4/c7ggE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Byefron.exe

Files

Byefron.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

/M)#sk
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ