ba35aac2da0e31b19196b85a8dda6f50N | Triage

Sharing

General

Target

ba35aac2da0e31b19196b85a8dda6f50N
Size

236KB
MD5

ba35aac2da0e31b19196b85a8dda6f50
SHA1

564ab3740a444785ad5d07bfb7edc7b967417fce
SHA256

0408c940043d7a6c7ee33b858641752e1862b06026b5754a6976419488fa9636
SHA512

3d7bf5df1dbd9619a5780cf63781344d9f0ec41e4145e664e3d9ac769ad8f58b5b5cd6bc6b97bbdec78e2781693b772b44e5140933e25d1ab5ff352814139e56
SSDEEP

6144:B4V3yyQTz8ITeRDZSw3D2Fsd1u/6mv5/dC:BciyQTdT+swTgt/6c/dC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba35aac2da0e31b19196b85a8dda6f50N

Files

ba35aac2da0e31b19196b85a8dda6f50N
.dll windows:5 windows x86 arch:x86

7df9dbed14147558d9c2b16fc9eecc49

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

HMENU_UserFree

winspool.drv

FindClosePrinterChangeNotification

kernel32

LoadLibraryExA
LCIDToLocaleName
SetWaitableTimer
GetModuleHandleA
GetModuleHandleW
LoadLibraryExW
OutputDebugStringA
LoadLibraryA

shlwapi

PathIsUNCA

advapi32

RegSaveKeyExA
AccessCheckAndAuditAlarmW

user32

GetFocus
ScrollWindow
CloseWindow

setupapi

SetupDiInstallClassA

msvcrt

isspace

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.datA
Size: 124KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 236B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ