ddcd3b980085d6546972875a1552b8358aabfa6eef5a143137c2d46493cc7cb7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddcd3b980085d6546972875a1552b8358aabfa6eef5a143137c2d46493cc7cb7
Size

12.8MB
MD5

0ed90f30ed398b9b327c1003866f3959
SHA1

12d67c6cc4f6450c2d1e515293e57b12f95d2c57
SHA256

ddcd3b980085d6546972875a1552b8358aabfa6eef5a143137c2d46493cc7cb7
SHA512

18cf86a621ef1eb0e429c2f62c65b9775d73cca584f1365561498e99e81188d052159b030a54996e5e1e9b7d2338c4d2ba3a688052aad6c03bb9535e608d6a2f
SSDEEP

393216:T3tGDLIiJCJuDokYIB8N5CBKVkwDYj0C05RT3ChNxpR:xGoigcEkYb5CwVkwDYk72hNxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddcd3b980085d6546972875a1552b8358aabfa6eef5a143137c2d46493cc7cb7

Files

ddcd3b980085d6546972875a1552b8358aabfa6eef5a143137c2d46493cc7cb7
.exe windows:4 windows x86

29264dc7f280213ceff9dfa9ab6ee25a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 5.4MB - Virtual size: 26.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE