BP-30M31_20240829_093844[.]exe | Triage

Sharing

General

Target

BP-30M31_20240829_093844.exe
Size

987KB
MD5

3fd2edc9d87c0a0eb814814f8f461483
SHA1

4b9ec9455439827479f661ddba252228e60db2ce
SHA256

3d896c411b2b4c2f0f419adda474b192d6e7e0f496c7cf4bfb678d9bcdae11b5
SHA512

21aee3b2bf388738937f7a262bc5def06c0d0eb09529d237565b369f93c643c5a44292031d844dc5a6e6a7f85866683d27e92ea966d3c24f89eabc6e84ae5070
SSDEEP

24576:OZMMCpg5QbkH/njR1WWdHSZCGF9bbMZi:70QmjR1W+HGHb9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BP-30M31_20240829_093844.exe

Files

BP-30M31_20240829_093844.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

efmC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 984KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ