bf1ff94306508c0605f56d42bff4e54c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf1ff94306508c0605f56d42bff4e54c
Size

371KB
MD5

bf1ff94306508c0605f56d42bff4e54c
SHA1

6a9e28d43dd9f2a2563d09a97c4dfea8d56049f3
SHA256

e25020349a939161bc8ad7e14a2f9ae9d34033b0829689f933b5476755cd3ce7
SHA512

2873297f27cea76e88c4ba8cc742088602e882ee3ffcda6a1f64d83fa089bde38223c8f5f676387a2daaf5c5fa9c0688f94df9dfad1d593354075db54da117f6
SSDEEP

6144:WTB52eg/9bH23sJzR4nDWgRAkPaQHGQn8xID0DMFY2vQUCT2+EcviN1wKpsJ7aX9:Q0egHJz8R3Pa8GLxe0DKNCxusc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf1ff94306508c0605f56d42bff4e54c

Files

bf1ff94306508c0605f56d42bff4e54c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

@@Apihook@Finalize
@@Apihook@Initialize
___CPPdebugHook

Sections

.textbss
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 363KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 246B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 135B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ