bfef32fbc23cc88aafd9ece2e2b95a8b | Triage

Sharing

General

Target

bfef32fbc23cc88aafd9ece2e2b95a8b
Size

156KB
MD5

bfef32fbc23cc88aafd9ece2e2b95a8b
SHA1

5fe661efaf22778f65bb117c6bdc8641909efae2
SHA256

339bdebbb2d11a246b4245074db484ddf782833c1fba5bc5764528e22a79ce0b
SHA512

9546f745e70ff9d7695c7ad48bbe1fcae6903d9d486bd1aefd4765d29cc5ec13c1d5bff3ceb8bda5118e341dc8f690c37c52482efe5b7a225ef7020786a43917
SSDEEP

3072:1K0cUX48d+AI4h8vwZoY0HWhNeRFRQJcsm/Tz9lDtTnwvJS2z:1ncUIwdVh8vwH0HWSRBsm/Tz9PE/z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfef32fbc23cc88aafd9ece2e2b95a8b

Files

bfef32fbc23cc88aafd9ece2e2b95a8b
.dll windows:4 windows x86 arch:x86

b1631f367d0c49197c36a1bc0fcff3a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
GetModuleHandleA

Exports

Exports

febzgucphctarebunspxzq
lzpxtzpiieblvqhjpwod
vwqytavnwuqpsjduglrvx

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ