bdda7a16268a4425615f0746b7828ecb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdda7a16268a4425615f0746b7828ecb
Size

4KB
MD5

bdda7a16268a4425615f0746b7828ecb
SHA1

ceb001a7ddbc1a7343ba0af675453c87d78a271a
SHA256

60f75066cdf8c05f9d29a3b086b5388e79b2b3dbf0fee5ae18e6e6debde8c551
SHA512

a7db1355845756f36e6f51fc2c36145ed00fe427a7d3bc974d01c94b4bc4fce55f092c58972e6af0ce0920a4fee073325689a7b0e2d7177ec82a4ff66c5abb94
SSDEEP

24:ZHGStCVlQF0L0Rd4mMVpgih6OP5OOPHV1F2gsRKOfovaeY9lZxf2C:ZvtAQ5d4mMLgihr5/HfF2gsRZfoQl2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdda7a16268a4425615f0746b7828ecb

Files

bdda7a16268a4425615f0746b7828ecb
.dll windows:1 windows x86 arch:x86

112fe8db160a6a3928828e24a2df9294

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetFileSize
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
Sleep
VirtualAlloc

Exports

Exports

service

Sections

.flat
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE