bfd1ef1a450dea8c7fedb0293e116ac9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd1ef1a450dea8c7fedb0293e116ac9
Size

45KB
MD5

bfd1ef1a450dea8c7fedb0293e116ac9
SHA1

627b0a1c5862967ce21e1ce4475e09f5a4a2c699
SHA256

ed2ce817029d1c666e29cbb0c1eccb385990d571db896d28bc17257df0553eae
SHA512

bb2a7a7aef6c811e85f747145c60f16cfdc540276330be5b6fcdf82e06af60c569bb72c335e7b2c61c0813e9e8ed9e5d116a3b0a431d5b6f3984c73c1d99b457
SSDEEP

768:/OGqkF7aVsz9GczcFb4po+EuCk3W1Rh1JiOshVKiUc+I8vYB:GGqO7aVsZiIn9YBZJva

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd1ef1a450dea8c7fedb0293e116ac9

Files

bfd1ef1a450dea8c7fedb0293e116ac9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ