8dd29de9a902a1b0e174d421cd693c94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dd29de9a902a1b0e174d421cd693c94
Size

6KB
MD5

8dd29de9a902a1b0e174d421cd693c94
SHA1

af82f3b81c19a72c9e80c3e99db65c163e3ad70d
SHA256

2dd131e1a2dc12ba0c1c94d28dc4412ab24f7bba6691b6939a7414b6dbf4b245
SHA512

772e0b65e2c10fa776b210d79a0a268abcc9ae15225260f50cea606f0b9166c999a6399d8257efdd470b243a2cbc57b72298fbcb33afd22c1a01d1aaca505bc0
SSDEEP

96:y/H/81MqZTEg+BVLVfp/stHXzfDJenuMfcvdubwLlmn+iOhy:8jNRfCXPJexudRL0n+1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dd29de9a902a1b0e174d421cd693c94

Files

8dd29de9a902a1b0e174d421cd693c94
.exe windows:4 windows x86 arch:x86

ab50de35d30ef7a6c2cf78aa0da5e2e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
SetFilePointer
ReadFile
GlobalFree
GetTickCount
OpenProcess
TerminateProcess
CloseHandle
LoadLibraryA
GetProcAddress
lstrlenA
GetStdHandle
WriteFile
ExitProcess
GetCurrentDirectoryA
lstrcatA
CreateFileA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetPrivateProfileSectionA
CreateThread
ExitThread

user32

wsprintfA

shlwapi

StrStrIA

Sections

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE