bf4a4f7e9affa12d00d6d52acabdeef1ae92a5bc54b44d7efd69fea8786de64a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf4a4f7e9affa12d00d6d52acabdeef1ae92a5bc54b44d7efd69fea8786de64a
Size

7KB
MD5

113b25f92183f195f1bbcf99e8e44a01
SHA1

978ca0053a491eb2445472f3d3ed1208dd253063
SHA256

bf4a4f7e9affa12d00d6d52acabdeef1ae92a5bc54b44d7efd69fea8786de64a
SHA512

768db24f8e7f5dc29ccd6475ef73a81d26a99d9c77578f6cb96798d7e5d3cce001ef4687b39cf156e0e5e8b7fd40d5050aba557a771d231c115b4b99e3cede54
SSDEEP

96:wb4VHccYJUC/aFbz/j0OvaPXd3cX5aXW:wUaJf/aFbP0Oc2JaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf4a4f7e9affa12d00d6d52acabdeef1ae92a5bc54b44d7efd69fea8786de64a

Files

bf4a4f7e9affa12d00d6d52acabdeef1ae92a5bc54b44d7efd69fea8786de64a
.dll windows:1 windows x86 arch:x86

f226b826cd84e9d22f32db364ed41df6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCurrentThreadId
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
GetTickCount
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
srand
strcat
strcpy

Exports

Exports

_LibMain@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 168B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 704B - Virtual size: 704B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 72B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ