bfba3f477e9f0b68956645f0307fba198c48b29e8afb7634d3ac6853176e6f0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfba3f477e9f0b68956645f0307fba198c48b29e8afb7634d3ac6853176e6f0f
Size

5.4MB
MD5

f4004d2fb2da4467d72bac712c161d3c
SHA1

541e17238155a993823c8a82b8fb487a87ee9226
SHA256

bfba3f477e9f0b68956645f0307fba198c48b29e8afb7634d3ac6853176e6f0f
SHA512

e8260cc52f42b379bd5500fd1e1f22cdf2660ff53e6b2c8618e6aedd8fc019370d46c2657e6eb64d2b7094ef215f96255d904774a034667998d47a53118eafff
SSDEEP

98304:OaeOgmheJDmn2W0XBVt4UNdcK7jtrQp/RX93sZ1ABovvWWpG0YZZuD:beO7EFmnuNBteZBo3vpGnZZA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfba3f477e9f0b68956645f0307fba198c48b29e8afb7634d3ac6853176e6f0f

Files

bfba3f477e9f0b68956645f0307fba198c48b29e8afb7634d3ac6853176e6f0f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 728KB - Virtual size: 725KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

GameClic
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GameClic
Size: 2.1MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GameClic
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ