dd855b6d8c34fba4249293cc420b5bf3e36ff71963d89cd01827f1a59996f573 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd855b6d8c34fba4249293cc420b5bf3e36ff71963d89cd01827f1a59996f573
Size

11.2MB
MD5

60acbc270b1558bcf313dc868f291e7c
SHA1

5235c52b9d407f7f01fa7e33be3e4b8f322dfaa4
SHA256

dd855b6d8c34fba4249293cc420b5bf3e36ff71963d89cd01827f1a59996f573
SHA512

51586d0fa70b5975e7f54d7eff3fbe30a19034cf7a33cf8b820e90e23da063df8a6580b47384a24fb2edf2c527b57983746ba2382b81630f2f93379bb0fedb79
SSDEEP

196608:fSZZppuhZDJ1Cjw1CUWDJTakrt8E256p6loN0QXAFby1+F4FLy3ZlgyG:0ghZDJ1Cj0CJDV/J7Vp6qCQiF403Zlgz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd855b6d8c34fba4249293cc420b5bf3e36ff71963d89cd01827f1a59996f573

Files

dd855b6d8c34fba4249293cc420b5bf3e36ff71963d89cd01827f1a59996f573
.exe windows:4 windows x86

6e602d2879f1359b4f218fefb19e4593

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

MapDialogRect

gdi32

SetViewportExtEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 3.6MB - Virtual size: 24.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE