withoutstartup_Bfmhblvn[.]dat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

withoutstartup_Bfmhblvn.dat
Size

914KB
MD5

396fd7f4589a79a14a3de56479fca7aa
SHA1

50a0f0f341a8d4eb7dc85ce5c5188237926abcf9
SHA256

25669396652a2be968220762fa128c1b901c31a8735978b7afc182160a3caf8c
SHA512

f98e31ee0aab55ed86d4af55ce08482aaa8e098d326851f5c8130885dee60f7abfa9171ea2b3a43a9297d1f221996468a9bd05d53e8880dd67540f9c5e6eeac3
SSDEEP

12288:wvfNT1X0/uAA+fmJNUC9jA4tWKG1Gu7iTQezjBwvQscns:wtYA+fmTXjA4tc1Gu7Kzuh

Score

N/A

Malware Config

Signatures

Files

withoutstartup_Bfmhblvn.dat
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 912KB - Virtual size: 911KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ