bf4cd2f6e8a5dd134ad9e75bb7a05f56 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf4cd2f6e8a5dd134ad9e75bb7a05f56
Size

100KB
MD5

bf4cd2f6e8a5dd134ad9e75bb7a05f56
SHA1

46d0c756b36b0b5f8e9233ecd3cd555b0befdbcc
SHA256

dc70f6103f41e9d3eda7790c335695244a6bad4486cbc684233a31ecba4e9b8b
SHA512

477fd74c60320aadf428f851d14f663e9a595deca5fdcfb8bc71f2207c4851c76d754b805e2e0384b648c109f0e4373da00b2bb4d42db35b3d8c843f6e8f3693
SSDEEP

1536:VmfP16zL+BNajuOoOHF1ysTBSfFkWGq6cjTA:VmgzLeNajua2dkWGqzjTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf4cd2f6e8a5dd134ad9e75bb7a05f56

Files

bf4cd2f6e8a5dd134ad9e75bb7a05f56
.dll windows:4 windows x86 arch:x86

c3016792476bcd1a8dd9ce5248111d19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindAtomA
GetCurrencyFormatA
GetFileInformationByHandle
GetVersionExA
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess

gdi32

MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
GetStockObject
DeleteDC

Exports

Exports

xrsewwgi

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 967B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ