ffd06716fbefa5343eb254316dcb36a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffd06716fbefa5343eb254316dcb36a9
Size

389KB
MD5

ffd06716fbefa5343eb254316dcb36a9
SHA1

e83e3350daa9c76455624ff2bb1a3201f20ab50b
SHA256

40b9aa2b3dffb7c208159df4ccf8b96b505c2b48014183542ef4848bf4c2d312
SHA512

ea31f13838c0a785a58c7dfebdcf628600d4093c39c87dff6fa830708a7484e4e7fd4ff1c93e66e5512f3975462d04df48c8b6d127986751dbaa0230097c22cf
SSDEEP

12288:ddtttocttttttttttttttttttttttttttttttttttttttttttttttttttttttttV:ddtttocttttttttttttttttttttttttV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffd06716fbefa5343eb254316dcb36a9

Files

ffd06716fbefa5343eb254316dcb36a9
.exe windows:5 windows x86 arch:x86

e798462cab5a4f61735ad89ac53e2bab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
malloc
sprintf
printf
free
memcpy
??2@YAPAXI@Z
_except_handler3
??3@YAXPAX@Z

kernel32

CreateThread
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetCurrentThread
GetThreadContext
GlobalAlloc
FindResourceExA
GetLastError
GlobalFree
GetCommandLineA
GetStartupInfoA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 375KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 706B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ