dd[.]exe | Triage

Sharing

General

Target

dd.exe
Size

742KB
MD5

cce53392d805e6fbfdbccf4527d53c26
SHA1

50801d009ce7743379e097210c66ef52e64810d3
SHA256

d5b58663ecebfcc7b6093c8d0fbea2539cbcaeaa00d3f46f38b60353223ace6f
SHA512

c3c1ad6dea6040276c296a1b2c2810c1072635597a76d86c9f95336bb729e291b35b2d66f9b789f117180a6b9c84b63efc471a456e4a534fdc5b85f7a8657eb1
SSDEEP

12288:qW0/V243YKqhxVOA3VTsl5n34yevy6y4cYRrx4bhtYdkyqvyCG7Po+VY1B6IBJI3:90dvYHNTk534ymy6y6qtyhD3u1wWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd.exe

Files

dd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 739KB - Virtual size: 739KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ