1dd552fd35f3391e53877c1170a65f84 | Triage

Sharing

General

Target

1dd552fd35f3391e53877c1170a65f84
Size

41KB
MD5

1dd552fd35f3391e53877c1170a65f84
SHA1

859f0b60705cf1b9906b21521d95cbd0fe53e470
SHA256

e9d2a4a1356cf1440263a7eafbca22361c17a8379f0e9446a4d03518db7941d5
SHA512

550317c464017a01eb02a4a2a63bb6634dd37aaf9df0d6f5514ff58958db318f0b44c72de4a470902508e4b69bd7fcfc85b35f5669a1dc2329d42546c1d1a533
SSDEEP

768:7oDKE2X9uEsDo2CLvyn10yoXtBu+Ct+50RmGFM8q3iGKIDOH:7kd89uEZU613I2QmGfHGTDOH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dd552fd35f3391e53877c1170a65f84

Files

1dd552fd35f3391e53877c1170a65f84
.exe windows:4 windows x86 arch:x86

d50f8e31c6e6409850a148fbd7f4643a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
free
_snwprintf
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
rand
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
sprintf
malloc
_snprintf
memcpy
strlen
atoi
atol
wcscpy
strstr
strcmp
strcat
fopen
fclose
_initterm
strcpy

kernel32

SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
GetLastError
SetLastError
Sleep
GetModuleHandleA
GetProcAddress
GetStartupInfoA

ws2_32

send
closesocket
socket

user32

MessageBoxA
FindWindowA
IsZoomed
GetClassNameA

shell32

SHGetSpecialFolderPathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ