1ddcd64e805d29877d31972a50fab643 | Triage

Sharing

General

Target

1ddcd64e805d29877d31972a50fab643
Size

5KB
MD5

1ddcd64e805d29877d31972a50fab643
SHA1

7ebc82cbd4b62e98acbdf4fbcaad69884eab3fa2
SHA256

68bb7ec5cf7b1c4bea4be3584fecca5cb2fe7907db36af6a557cd17edfb4f666
SHA512

cce68a52edca9f8618f651a0ca35e9152a6a6550ea31c69062f18628307af83678a8114fbc8b43205763a52e155527cf6b9046871ac9efd2c24b44dab4ecb65b
SSDEEP

96:iOcZqnGuuBnqgqsq9j04eESAv62vduvCOTWqWaXOnWcypAIA9ejHui:i6d0nTzAQuTmz3+IAIA9e7ui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ddcd64e805d29877d31972a50fab643

Files

1ddcd64e805d29877d31972a50fab643
.exe windows:4 windows x86 arch:x86

aa32c9e940b109c179194b2c3efe1c2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateEventA
GetCurrentProcessId
WriteFile
GetProcessHeap
ReadFile
lstrcatA
GetSystemDirectoryA
WideCharToMultiByte
CompareStringA
CreateToolhelp32Snapshot
Process32First
ExitProcess
GetModuleHandleA
GetCommandLineA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next

user32

GetClientRect
GetWindowRect
GetDesktopWindow
wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE