ad2fdd86734fad311e35edbc5690e830 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad2fdd86734fad311e35edbc5690e830
Size

80KB
MD5

ad2fdd86734fad311e35edbc5690e830
SHA1

5941fd94e6193e3292483157c4a327965ad608e8
SHA256

1859e8cdbf21f4943c1709f041c7ab6cd7a96091ebddb8edfcddd9631236a5b8
SHA512

692a5b07a6ed91e49353eaf99fc54cae61ff5110c9188c5caef812c1085e7ba17a4bd8a6afa69d7f52fb14043c75406025f52ca82a451c279ec613e71dd72ffc
SSDEEP

1536:TBNtFUmYrHl9bGMQXow8JRV7FEsz7twDChgPCm:NNtFUm8FJr8onnbBwwgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad2fdd86734fad311e35edbc5690e830

Files

ad2fdd86734fad311e35edbc5690e830
.dll windows:4 windows x86 arch:x86

ac35b4361ec9d8e31c5cb27d3c3685b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

mddo.pdb

Imports

kernel32

ExitProcess
Beep
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
CreateTapePartition
WriteFileEx
ReadFileEx
CreateFileA

Exports

Exports

duibydtpp

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ