HDDScan[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HDDScan.exe
Size

373KB
MD5

302db28f46805142c168c440d14ae6a5
SHA1

4921e386c2a1fbf925b4cf4ff5207ddc5a0466f9
SHA256

3b1f53bd7268cddd365eb2bf8b6d65c96ca5516d5530c67ce07b183d10e00824
SHA512

f79508e66cbac9a5755dc746e6371d9a38c16013119791ec69d96d5c831009ef8719ac21e21d9b488879503a87b52dd7beab92aedcecc72e7e4ee64b545660db
SSDEEP

6144:SZyE3lpuhepSZbzdc6o1HN4fGBf6lQnHOAfEW5/0qpfsiLwJCWkFA:vwIhqczGBSWf62HOgH5cqpfNLwJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HDDScan.exe

Files

HDDScan.exe
.exe windows:4 windows x86

c2f6f83f92fa54d9e84f748850928c4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

Sections

CODE
Size: 361KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE