bba444ac85cebcc33f3ebeb92ba10a0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bba444ac85cebcc33f3ebeb92ba10a0d
Size

59KB
MD5

bba444ac85cebcc33f3ebeb92ba10a0d
SHA1

b8e77a455774b628767882e83aaf1531313200c1
SHA256

e23f62c4ef89a4fffa3863774738cf50caeb04a715709f83a3f9fc320d86277c
SHA512

f01caea7013f8b4fae248fc970abea951544be71222bd07d35f835165151d53d8dd0321c60f7a001f7baf7742059ea6d36b735d43d1d0098dede1d5c6da3b938
SSDEEP

1536:Q/IIcoXVFoq5EPbj3YWMpDecVxDL1ZTM:Q/LXVFobi1RdZTM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bba444ac85cebcc33f3ebeb92ba10a0d

Files

bba444ac85cebcc33f3ebeb92ba10a0d
.dll windows:4 windows x86 arch:x86

d8446159734e9aab5a2c04977af2cf1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ald.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
FormatMessageA
QueryPerformanceFrequency
Beep

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ