4ddda94babdd123150ef65b5d4f77619 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ddda94babdd123150ef65b5d4f77619
Size

4KB
MD5

4ddda94babdd123150ef65b5d4f77619
SHA1

db7a62405b8c7c013d8db45c09d84b71a9320957
SHA256

af14cce044e4fa3fdacbea0d25ad83d83c4ba02603317061906d48e953743d9d
SHA512

f254f744ddd9f29f7e456ed43d9ada078ca9d01ec8a9c17819f2f7552bdda5d54f236bb57aeee700225649d755de82022287789c359d4f7e5b1b12e42e641844

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ddda94babdd123150ef65b5d4f77619

Files

4ddda94babdd123150ef65b5d4f77619
.dll windows:1 windows x86 arch:x86

21719804e77e177be7b027c9b6f8c968

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
GetFileSize
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
SetCurrentDirectoryA
Sleep
WinExec
WriteFile
lstrcpyA
lstrlenA

shell32

ShellExecuteA

user32

MessageBoxA

wininet

InternetGetConnectedState

Exports

Exports

start

Sections

500mhz
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE