0dde4dbf36d2ef393035b5e5897909e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dde4dbf36d2ef393035b5e5897909e8
Size

80KB
MD5

0dde4dbf36d2ef393035b5e5897909e8
SHA1

a8fa9468029b24b3710c3f0dad1b18d19ef36eb3
SHA256

522135f0aa3c6252ad71e2f0ee8ad12ac694ccd2df70b20414f3e8c6d3eee4d8
SHA512

f3bf72a2a3962d6f797cef867ce6d26f716c68bd93bc41f41c9488138fbd9667fc3517de54038cca802bf7c3c07d6e50f2714ead5742ce6631e96fe08df45d57
SSDEEP

1536:JhPtojvRGnH8XdJr6POu9TJR0WavnVE+6+rqSKlkcd:/PkMH8XdJQT07e+RqD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dde4dbf36d2ef393035b5e5897909e8

Files

0dde4dbf36d2ef393035b5e5897909e8
.exe windows:4 windows x86 arch:x86

dfc3509af77c6509173d246196a6d809

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FindResourceA
lstrlenA
FreeLibrary
LoadResource
WriteFile
GlobalAlloc
SizeofResource
lstrcatA
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
WinExec
CloseHandle
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE