bd4d93092cde763edba326a6400c886f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd4d93092cde763edba326a6400c886f
Size

3KB
MD5

bd4d93092cde763edba326a6400c886f
SHA1

6588e7fbbb65a0feccecd19c6accd6f36eae21ca
SHA256

79fcd0fde5db7c73adeacffdd57ef6264e6a0061602e48a259296b82ae9909a8
SHA512

ecb175bfc97e6148542ef482f3fa9bf3eab49a71587b70464be58410ace0c417c431625c8d14c01ccdd60293a0ddb367022d449773490277358c449c46293ad7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd4d93092cde763edba326a6400c886f

Files

bd4d93092cde763edba326a6400c886f
.dll windows:4 windows x86 arch:x86

73e50087c4e067a7327d7e7845a1511d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
CreateProcessAsUserW
RegQueryValueExA
RegCloseKey
RegOpenCurrentUser
RegEnumValueW

kernel32

WaitForMultipleObjects
DebugBreak
GetSystemTime
FindFirstFileW
VirtualAlloc
Module32FirstW

Sections

.text
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ