dd04b002364ba4c2bfa9ee34465bc23c | Triage

Sharing

General

Target

dd04b002364ba4c2bfa9ee34465bc23c
Size

556KB
MD5

dd04b002364ba4c2bfa9ee34465bc23c
SHA1

55d515d1b98e4024aa00e87630340adb7f7b9603
SHA256

0138e060a226925970f5b9488babd201daa2968bada87a281732a701c6da8789
SHA512

fa2bdd79322ace4a7ac85f00aedfa0e86b0eccd9ac41bd4c87fd22d53e0ff399e0316ea6e7c635992c82b8a2cfad8d58d3799cbf930c04c172d74dc4e831f849
SSDEEP

12288:wcP3/Awk/7iS/d348sJTflM6qTwz9FhC5lruNjkDUcv:wkAwkuS/d3kTfm6qTwJKYj4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

dd04b002364ba4c2bfa9ee34465bc23c

Files

dd04b002364ba4c2bfa9ee34465bc23c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ