bbaadaf25723d072bc58469633316737 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbaadaf25723d072bc58469633316737
Size

5KB
MD5

bbaadaf25723d072bc58469633316737
SHA1

723a56a237a07831c134bb9cdc094e267a319f05
SHA256

e90d691fb9f1a874237877de645c4e1a3bfe947dc298049e688fdc9b978cff79
SHA512

ed11d84c100b9f4fb149dd696ddd28fa0190d7333f294be65e2c07fc34bceb2af1500a9b7628c061e33ad9515c474804d12e9e3fa913b43ecfb82b6f23575680
SSDEEP

48:KDM5YGSJkphat6DWnIsu1WiIZbaCXVT0Z5zGRjMy5B0uGk72NB8uBD:sqhXrDquM3bNx0Zdw4y5gkKNG4D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbaadaf25723d072bc58469633316737

Files

bbaadaf25723d072bc58469633316737
.dll windows:4 windows x86 arch:x86

cf944192ae0f1bdc23098ca952b19a7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crypt32

CertEnumCertificatesInStore
PFXExportCertStoreEx
CertCloseStore
CertOpenStore
CertGetNameStringA
CertDeleteCertificateFromStore
CertAddCertificateContextToStore
CryptMemAlloc

kernel32

CreateFileA
GetTempPathA
GetLastError
GetSystemDirectoryA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
WriteFile

user32

wsprintfA

Exports

Exports

k
o

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ