0bfd0e32e4708467c2adb7cf02f26cef | Triage

Sharing

General

Target

0bfd0e32e4708467c2adb7cf02f26cef
Size

144KB
MD5

0bfd0e32e4708467c2adb7cf02f26cef
SHA1

3ec2bf26a194a78a82e838eb98e1e506851517b3
SHA256

524b820d1163019fce3831206de2e97b0c8f79732a6e491ddaf75c721e9419ed
SHA512

ac5096e698253351af50638047e73a5c70f37a6a6e232d476e5f59ab35d1cf50af087a6684fb327b1e661589ccdc9ee2d3ca0de22f449ba389bc205b427efa90
SSDEEP

3072:sL1hDseGUvbhdZWV4ZD6muIpXc5fn5iCnDtqRidxM0fDkx:Y1hDrGUvbhd73XkDtq0dxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bfd0e32e4708467c2adb7cf02f26cef

Files

0bfd0e32e4708467c2adb7cf02f26cef
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

WSPStartup

Sections

CODE
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ