ddf1b4b5a60e6c0584fb4ab5282e8d36[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf1b4b5a60e6c0584fb4ab5282e8d36.exe
Size

554KB
MD5

ddf1b4b5a60e6c0584fb4ab5282e8d36
SHA1

6eb939ef00e3373cc9aadee9b355b5435f6a9db4
SHA256

de361195aca3d3d04494a26d2023ecdc0bf09cf56f379813d19b2c256ee18df8
SHA512

f886fdd85047e32f2bcc5aceee47221d9910864e100742eedc25ceb5472e88972bd8f6c057a0dc8cb7c124bf8c66a23456f44eb330b861c1059fa3f53fd58eff
SSDEEP

12288:MPV/OArfbPM+SN5ttOqbDqeN/PfZu3B4Sgk4bWCAna7:lA/M+qrtOq6eNfZEBOk40a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf1b4b5a60e6c0584fb4ab5282e8d36.exe

Files

ddf1b4b5a60e6c0584fb4ab5282e8d36.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 546KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ