bf05921ce4d7418dd05dab61e4c356a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf05921ce4d7418dd05dab61e4c356a4
Size

132KB
MD5

bf05921ce4d7418dd05dab61e4c356a4
SHA1

4366b8de469ab2ad9917ac1ff2d9f346d74dd8d9
SHA256

bdba99ae2bc8e3bdc813702fce3d6cbcb85c6a96eafd87ada89b692288810a9e
SHA512

0edd21ebad060b3c698584469bb133954e0178c24e0da9d75d306cd8154f00d56eb2860fcad79e561c490fb24525e76ba93c3da68f899b8d44b21dd6b96b42a0
SSDEEP

1536:YFMqXvbQcf8rNRmfq/8AHJpUaESg45xJSEhCg:oXDeuq5c65xJSEEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf05921ce4d7418dd05dab61e4c356a4

Files

bf05921ce4d7418dd05dab61e4c356a4
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE