bf1208d20181781f63b9398d154812c3 | Triage

Sharing

General

Target

bf1208d20181781f63b9398d154812c3
Size

26KB
MD5

bf1208d20181781f63b9398d154812c3
SHA1

83a9d7905001605a06116d43cb1f9fb9394c1d79
SHA256

f172b1e4f2b55550cafbd74ca935388b252d57df309fd3571fffe5326d63e789
SHA512

24a289b7a7abfccfce3c73dbf6621666cf622b5151ecad28c866c463281e9c68395771feff1d235aedb67669ff303be7a11c7f925509ac1ec668cc9be51a3c87
SSDEEP

384:wmd/iknNNMhO2CMrUaW6xWLX7JMo/5rjqMTYkXr8KS+nbSckwT3kKuPED+Vrf:w6ikjMFC16wT7l1IX+n+/xKucaB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf1208d20181781f63b9398d154812c3

Files

bf1208d20181781f63b9398d154812c3
.sys windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ