adff235a2ede6000a383176037e4ffd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adff235a2ede6000a383176037e4ffd6
Size

18KB
MD5

adff235a2ede6000a383176037e4ffd6
SHA1

3fc2bbb7f8617d8c0f15360b88d71770bd1ee917
SHA256

c3079e5c0b71e96f5246e23b7bf35cc36a1f7212dc26fd00159ca5cdf2a0c4a9
SHA512

e211f01d826bdd43c38f7b91b5dee84abebd3b948cbb27316e9a52adc4202d4ce5682bf1ea3f27f0904ce038ec309e94cc9a1d528e827eead60da92d6953eebc
SSDEEP

384:IPUi0iuLLjd0jnrJjvfKtwlL1ARkow6vHNVhtJ:7i0ZcNjvSt21QwUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adff235a2ede6000a383176037e4ffd6

Files

adff235a2ede6000a383176037e4ffd6
.exe windows:4 windows x86 arch:x86

05b5d940333beecba7c9ab43aa0628a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCompressedFileSizeA
GetTimeFormatW
GetVolumeInformationW
DefineDosDeviceA
SetEnvironmentVariableA
lstrcmpW
CreateDirectoryA

user32

PostThreadMessageW
IsCharAlphaA
CopyAcceleratorTableW
DdeCreateStringHandleA
RegisterWindowMessageA
OemToCharBuffW

gdi32

CreateFontA
GetOutlineTextMetricsA
TextOutA
GetTextExtentPoint32A
LineDDA
GetGlyphIndicesA
EnumFontsA
GetEnhMetaFileA

Sections

.��
Size: 13KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ