ddf1428b942d57624377dee78fefa78d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf1428b942d57624377dee78fefa78d.bin
Size

74KB
MD5

ddf1428b942d57624377dee78fefa78d
SHA1

3ab8a5f6abfdf329123d0705d84b065fe88199fb
SHA256

79c14b8140f34ace5c1d31a32d1ac64414a857c0d71f909e1650f30d0907b7e3
SHA512

019b633ebf8aa2f20c092dfd7de4ecf389a939fc19d22132f3218854568fcaae93aa897a9796a21bedcb8755be10d332704387c0970812d999912718c8f5e238
SSDEEP

1536:8OuxztJhCfF6v0xNpN9DP1n8/z9HY92phsC3cZ:Dcx7CTxNpNtkZH62Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf1428b942d57624377dee78fefa78d.bin

Files

ddf1428b942d57624377dee78fefa78d.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ