fdd668ac6334546851a01e312b4e0f7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdd668ac6334546851a01e312b4e0f7a
Size

1021KB
MD5

fdd668ac6334546851a01e312b4e0f7a
SHA1

aa715111db7aff5572a608da3467073a47802204
SHA256

b609a750fbb084680fee175c55bda2e2ab1466b99f8d1d0e6da5e24dbd9fd02d
SHA512

113b0b600fba08845ebb3aaeff35f0cda0e351f06f810098eac4ca6d5231f8444967bb75739114527a57b2dd2d6e920327641b5b3a7c058f4f5c43935eff3892
SSDEEP

12288:djtQb6dL3jbtKF303V5/VP9Y3RN8CUI8ol88yTlABJxs/9trFV3UZ1VGMftjoAqr:dGcnbB3b7+N8VIXyJ0yTVEhVv7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdd668ac6334546851a01e312b4e0f7a

Files

fdd668ac6334546851a01e312b4e0f7a
.exe windows:4 windows x86 arch:x86

9e95dc415d3c1426ccdd7e5a7aed3009

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GlobalAlloc
LocalFree
GetModuleHandleA
lstrcpyA
GetFileSize
GetVersion
GetVersionExA
lstrlenA
LocalAlloc
GetTickCount
GetStartupInfoA
CreateEventA
Sleep
GetCommandLineA

gdi32

GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
LineTo
CreateCompatibleDC
DeleteObject
BitBlt
SetBkMode
SetROP2
GetPixel
SelectObject
CreateFontIndirectA
GetTextColor
GetObjectA
CreateSolidBrush
GetDeviceCaps

user32

GetClientRect
CreateWindowExA
ScreenToClient
MessageBoxA
SetWindowTextA

Sections

.text
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1014KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ