1fbf50679496b6db03b593a35a5468dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fbf50679496b6db03b593a35a5468dc
Size

84KB
MD5

1fbf50679496b6db03b593a35a5468dc
SHA1

6b3b3bc96d2d24d4f39a8477fd36117146d608b6
SHA256

af700e10130564f3b47b4f080a1e0ae50d75be1e0d5960ce44a6fb506295071d
SHA512

30c24a8c5e65bd7d68684fab4d471582b85c02af38158f066f9b38033dc5a5dfeb202bebcf48583a489f8f0ac6403ee3f2002a0c1abb77459badddec44cce242
SSDEEP

768:sBG5/c/uw/86DizFbnG4pZffEiHGQM+6QD6xVhv7L5UC7JOH56qQvYgrCa0QvwoP:yD/J+zRXPHGHQur5/n3SiwnezH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fbf50679496b6db03b593a35a5468dc

Files

1fbf50679496b6db03b593a35a5468dc
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DelFileFbi
ServiceMain
SetupFbi

Sections

CODE
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ