dd0ace8f812e5fb15ff402f5af0000b6d7592d6a422a252636ebd550f04c3ffc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd0ace8f812e5fb15ff402f5af0000b6d7592d6a422a252636ebd550f04c3ffc
Size

145KB
MD5

dca0eb6b7a406dc8071763a3f4c20489
SHA1

83278e65da0b826ba1d8c332d64fea402ea52fa7
SHA256

dd0ace8f812e5fb15ff402f5af0000b6d7592d6a422a252636ebd550f04c3ffc
SHA512

30d522c0f9217a7b585fbc9eccf4fc916c6ea2f951c864418cadc1db770a5b2750251a32e3c2e5de1fe2960bc15c1b6f879d94f3eda7828ba19b6a0395a89b9c
SSDEEP

3072:SL1MX4+ZLpLcydC6M0YNyQJfm7LWU0CxcePOMixvpss8z/qoutXL:SL1MxLc36WzJO7qdIchXuscqoSb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd0ace8f812e5fb15ff402f5af0000b6d7592d6a422a252636ebd550f04c3ffc

Files

dd0ace8f812e5fb15ff402f5af0000b6d7592d6a422a252636ebd550f04c3ffc
.exe windows:4 windows x86

532555de12c53ae5cca9f69f44b85ac2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

atoi
strchr

kernel32

HeapFree
LoadLibraryA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
FreeLibrary
IsBadReadPtr

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ