1dd88db47429c9fb9b5c980951a7bb1d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dd88db47429c9fb9b5c980951a7bb1d
Size

10KB
MD5

1dd88db47429c9fb9b5c980951a7bb1d
SHA1

bf969df9772f80cc1976f999bbe67e767ed59bfb
SHA256

cb6aa67b4bd772f2f07a9db2ae101bfccc71003a35a5de85c8fe15b9faa1b46d
SHA512

27648ac505421118d87b3432f7cb4fd565a44bac49384c5394ddf7a5956f0051513e1aa158516c88f4aeb1761767f2ea999251373dc9e339ed58d949fb07067a
SSDEEP

192:GoNMITNb+u+qq5SrdGehLid2Rdw+1zWf/FdOe+wxAWXF/:GUMITNb+u+55A8eh2wdw+1zAdxL1/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dd88db47429c9fb9b5c980951a7bb1d

Files

1dd88db47429c9fb9b5c980951a7bb1d
.exe windows:4 windows x86 arch:x86

8827a8d275a2f689a8656a26d60e8c67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
CharUpperBuffW
MenuWindowProcW
MoveWindow
CharLowerBuffA
GetDlgItem

kernel32

GetLastError
VirtualProtect
GetComputerNameExA
ExpandEnvironmentStringsA
Module32FirstW
_lclose
FindFirstVolumeMountPointW

gdi32

GetEnhMetaFileBits
GdiIsMetaFileDC
EngStretchBltROP
DdEntry13
RoundRect

Sections

.text
Size: 3KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE