ddc8ffd0641b7d561430ae489fc6aeb0[.]exe

General

Target
ddc8ffd0641b7d561430ae489fc6aeb0.exe
Size 282KB
Sample230622-lbbqaaeh4v
SHA256 fd499f6e9aeec4927a0b4ef013123db28d6ec283845cf8b6632efd209f53d383
MD5 ddc8ffd0641b7d561430ae489fc6aeb0
SHA1 a14c77468476aa2c5e8dfe75f35e8751f1ddce87
SHA512 c7d745a47567ec4ac46bdd030d3331ec6b73f551def021b9b72b870780558a70fe6c3d097f0a7d679eb2d74714975f783ecd39a6c71129dae464e9b5c7ee0ab7
SSDEEP 6144:tFnyEWXGf0TsCK1HRqTlPdLd5nAGkCi2K:7yEUGfws/1xeNd5I
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddc8ffd0641b7d561430ae489fc6aeb0.exe

File Explorer

ddc8ffd0641b7d561430ae489fc6aeb0.exe

.exe 282KB

ddc8ffd0641b7d561430ae489fc6aeb0.exe

IMPHASH 4c7f209181ee40b674200cb9d1c76dd2
SHA256 fd499f6e9aeec4927a0b4ef013123db28d6ec283845cf8b6632efd209f53d383
MD5 ddc8ffd0641b7d561430ae489fc6aeb0
SHA1 a14c77468476aa2c5e8dfe75f35e8751f1ddce87
SHA512 c7d745a47567ec4ac46bdd030d3331ec6b73f551def021b9b72b870780558a70fe6c3d097f0a7d679eb2d74714975f783ecd39a6c71129dae464e9b5c7ee0ab7
SSDEEP 6144:tFnyEWXGf0TsCK1HRqTlPdLd5nAGkCi2K:7yEUGfws/1xeNd5I
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32727

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceW ClearCommError InterlockedDecrement GetLogicalDriveStringsW GetComputerNameW OpenSemaphoreA LockFile GetTickCount GetCommConfig VirtualFree ReadConsoleW FormatMessageA GetWindowsDirectoryA FindResourceExA GlobalAlloc IsValidLocale FatalAppExitW GetSystemWindowsDirectoryA GetVersionExW WriteConsoleW GetModuleFileNameW GetCompressedFileSizeA GetACP GetVolumePathNameA ReleaseSemaphore ReplaceFileA GetStringTypeExA VerifyVersionInfoW VirtualQuery GetProfileIntA SetCurrentDirectoryA GetLastError GetCurrentDirectoryW GetProcAddress VirtualAlloc BeginUpdateResourceW SetThreadPriorityBoost LoadLibraryA OpenMutexA DeleteTimerQueue MoveFileA CreateFileMappingW AddVectoredExceptionHandler BeginUpdateResourceA PurgeComm ScrollConsoleScreenBufferA ReadConsoleInputW FindFirstVolumeW GetCurrentProcessId CompareStringW CompareStringA CloseHandle CreateFileA FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleA EnumCalendarInfoA SetFilePointer CreateMutexW GetConsoleAliasesW GetVolumeNameForVolumeMountPointA InterlockedIncrement Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree RtlUnwind RaiseException TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime SetConsoleCtrlHandler FatalAppExitA HeapReAlloc GetCPInfo GetTimeFormatA GetDateFormatA GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode FreeLibrary InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetTimeZoneInformation SetStdHandle SetEnvironmentVariableA

user32

CharToOemBuffA CharUpperBuffA LoadMenuW GetCaretPos GetSysColorBrush SetCaretPos GetClipboardOwner

gdi32

GetPolyFillMode

advapi32

ReadEventLogW ReportEventW

Sharing