bfcf3208329fac08a362d1a973f58b37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfcf3208329fac08a362d1a973f58b37
Size

45KB
MD5

bfcf3208329fac08a362d1a973f58b37
SHA1

7a32c02592703b206589e436963d5347b0d3242d
SHA256

e8eed171a6f8fa5a6c1d830e6c157166851a9aaf193a573eb9e14f0506d6c687
SHA512

9313cddb154b62b0830c9e13b3b482c9ebd379d489a2dd00fc927ad8ca97d3ed3d51a24b360b9ff94cb13186bfe8746bbe6c9721f8d8c1fbe7e33de02a794dbc
SSDEEP

768:4yJqfGQFwL/3Ji32SEA0R7MFd9w2ux/RHxFpzErrRXa4HtN7e758x:vJqfGQsw3R/0R7T2QFBmTe7ex

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfcf3208329fac08a362d1a973f58b37

Files

bfcf3208329fac08a362d1a973f58b37
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

WSPStartup

Sections

CODE
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ