bf6dbd23b16a7e06083810c7979e9e11c70c2c338e5931fa5f35787a30887d3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf6dbd23b16a7e06083810c7979e9e11c70c2c338e5931fa5f35787a30887d3c
Size

884KB
MD5

116603a446adc2663435c0471a5cc17f
SHA1

fe248b7cbff7c23f031157e3534645330ac345e4
SHA256

bf6dbd23b16a7e06083810c7979e9e11c70c2c338e5931fa5f35787a30887d3c
SHA512

4377eeb883f69fae55b22b2fd95d5d91bd1841a9c1e7e32e0dbfd2e7ba44ce37cc08203a6498f2093c8b69aa604d24fe6dde89ff51385a73dc019738f712ed86
SSDEEP

6144:qcZvPKUqvexoY0qmosVUev4j9uBqvexoY0qmos:qcP8exoYvj308exoYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf6dbd23b16a7e06083810c7979e9e11c70c2c338e5931fa5f35787a30887d3c

Files

bf6dbd23b16a7e06083810c7979e9e11c70c2c338e5931fa5f35787a30887d3c
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 464KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ