bdb7ba205393d18f631401099a87cf1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdb7ba205393d18f631401099a87cf1b
Size

120KB
MD5

bdb7ba205393d18f631401099a87cf1b
SHA1

292d80863353889962eee2025437dfbe77c7279d
SHA256

c794c9c83739e29123fa9dbb1d627b080a4c0dec5ddf998851a54bebaa54ab99
SHA512

2196c75a01ac1302afbffe6b2fb27e7656efb2867c846f640e82e3e32757de17c942ba7d1f7bd3d3d65630862909c55bf15ff8cf2e160fcd4d990b7a9c12651b
SSDEEP

1536:kXBILsVwG2ge3J9qeRJT8s5EFZjjppFFmOR/kiLk7KYwC2BGruTxCokdi08b:kXBIsV278eRJYsoZH7E0FC2g6TxIdXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdb7ba205393d18f631401099a87cf1b

Files

bdb7ba205393d18f631401099a87cf1b
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ