ba0a468202134fbb223f8608163f0a97 | Triage

Sharing

General

Target

ba0a468202134fbb223f8608163f0a97
Size

35KB
MD5

ba0a468202134fbb223f8608163f0a97
SHA1

ef80fb86817b61d230b2454891f6d84b37205e0b
SHA256

93827304a6c1ff85366c58c7bd8140b4b7eecc3bf4180060b8101d69197d6365
SHA512

d855e37ed8329731fab3589b4717c41a1342cf7b1834db69b5ebf996049a4f400b7d4320e15613ccd7d3b22e60bd3a118b9d4c8d1b1acc0ac07c61a8d8728297
SSDEEP

768:BEBBcJNkLmPIzbWREx5hYrTNYVojuKOX4+FJNy6:y5mUCRELhYTNe9KMFy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba0a468202134fbb223f8608163f0a97

Files

ba0a468202134fbb223f8608163f0a97
.dll windows:4 windows x86 arch:x86

d2e4b629a9ed62398eda6720e5165584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

hal

KeAcquireSpinLock
KfLowerIrql
HalMakeBeep
HalProcessorIdle

ntoskrnl.exe

IoCreateDevice
IoFreeIrp
KeUpdateRunTime

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ