bafe49fbf35a2bb9e95f2f083b36c617 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bafe49fbf35a2bb9e95f2f083b36c617
Size

84KB
MD5

bafe49fbf35a2bb9e95f2f083b36c617
SHA1

2ee01352acf8dc464b3427be307e1d5871df429f
SHA256

36abd0d106b78677fd746e301be140bb9a0a60ef870d4e233379928209910a1d
SHA512

3085f9b530940366d09a26076f47dabf8fdcb810f050603efedc8e5a2a211d1aba92d7e56a24ebcf0c96330956bcef04866ce6e860572001b9efe558d050759f
SSDEEP

1536:jGGSjq4NZ4OA/MljcBowgaOHmKMzPQXuHd40NYLZWVONGIE:iag4ZUljc3Kio+fNAZIEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bafe49fbf35a2bb9e95f2f083b36c617

Files

bafe49fbf35a2bb9e95f2f083b36c617
.dll regsvr32 windows:4 windows x86 arch:x86

f287fd6bfed6cb699b37f724e5b2939b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryExA
GetProcAddress
LeaveCriticalSection

advapi32

FreeSid

oleaut32

SysFreeString

user32

CharNextA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Lodklod
DllMain
DllRegisterServer
DllUnload
DllUnregisterServer
ServiceMain

Sections

.text
Size: 81KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_MEM_READ