ddd7467568a333245f4ad97987f74d53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd7467568a333245f4ad97987f74d53
Size

70KB
MD5

ddd7467568a333245f4ad97987f74d53
SHA1

62e027c3519894775960049197eb631d4df5ab20
SHA256

f1ad22541c3d0dbb5883e22e82f7f22ff1dd3f79540442d51e1174519427ec75
SHA512

686f258a8241cba122f016e62791e757206debd097242afb25071f5059cc944a72ec7fa035bb4ad51977f58fe54a28a94a61d7eb7dcc4174137cf167aac3b6e0
SSDEEP

1536:32bPrq65lKC5V9An4W4lwQhZpppc6Kc3B/XXGo:3Ir5lKKV9W4WFQhZpppEaBfXN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddd7467568a333245f4ad97987f74d53

Files

ddd7467568a333245f4ad97987f74d53
.exe windows:4 windows x86 arch:x86

573a8e3002c3a49e385a632af519e901

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE