bdaaad32d7bdbdfabf794f15948005aa | Triage

Sharing

General

Target

bdaaad32d7bdbdfabf794f15948005aa
Size

56KB
MD5

bdaaad32d7bdbdfabf794f15948005aa
SHA1

5aec692a1d883ea668056c3f1a3335ae0fa970c0
SHA256

be2e8e91e1b62e03ef9a3ccc3b363c2719aeaf330855a52c9248876d1f5855d6
SHA512

a584aec61820cb63910bf91ef9f07deb671dae35606acec041ffd6bc5223d4844f86818c67c69526b94f62c7c49cf64f7075932669afb19bb29e3a915c565a90
SSDEEP

1536:20z7h6EDeMllqBrm5ty83d6BXls4uzE+4O0ke3:F70EDms5AiGlsTE+r0N3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdaaad32d7bdbdfabf794f15948005aa

Files

bdaaad32d7bdbdfabf794f15948005aa
.dll windows:4 windows x86 arch:x86

7b76803d54039329eef7686cd31c7a3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawIcon
DrawCaption
DialogBoxParamA
DestroyIcon
DeleteMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDesktopA
CreateAcceleratorTableA
CharLowerA

kernel32

GetFileSize
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
VirtualAlloc
SetEndOfFile
ReadFile
RaiseException
OpenFileMappingA
LoadLibraryA
CompareStringA
EnumResourceLanguagesA
FlushFileBuffers
FreeResource
GetLocalTime
GetVersion
GetVersionExA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE