bf5893e4eba41b9f4f31c5f34762afe1 | Triage

Sharing

General

Target

bf5893e4eba41b9f4f31c5f34762afe1
Size

30KB
MD5

bf5893e4eba41b9f4f31c5f34762afe1
SHA1

5c022191f3ce73737e689c8475e3bb4071cec546
SHA256

f8c8308a8e3b886bf7a554305f04c5b2f84c636dfbba837349d4e563cbb994d4
SHA512

0a03021c73bce3f02d17133046c03d09cea1e26b639b61e3ab01712f93cbbcee42114f4b10d0f0a2c73b005aebee69391555b85b996e3948b3faea1dad54b1d4
SSDEEP

384:359+PbhI7kZp9WSjfW/8Z0pk41D/+CBggsdvRdM+vd3t0wI8sIHOHQ:D+ThI7GT68R4B+yQz0uswE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf5893e4eba41b9f4f31c5f34762afe1

Files

bf5893e4eba41b9f4f31c5f34762afe1
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJhjkFdsa

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ