dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5 | Triage

Sharing

General

Target

dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5
Size

6KB
MD5

d1efab79299db1a92c736cfa0bc3917d
SHA1

26a806089c58753c3f42f1b3602598bd2adb133f
SHA256

dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5
SHA512

fa7eccd42399de62da28d1f82f3b0b62934fa246c30558972d4f3ba9c78804a4bb677577484ae3a2beed32e72794e485942b1cb5ce1ada5c6d9b7dd6282d065f
SSDEEP

48:S1bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uDO:k0mIGnFc/38+N4ZHJWSY9FI5Wq8x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5

Files

dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5
.exe windows:5 windows x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ