ddd79118d20f988c84d7a5809acf8d62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd79118d20f988c84d7a5809acf8d62
Size

149KB
MD5

ddd79118d20f988c84d7a5809acf8d62
SHA1

f1a4f19a2bc41f628e67ff0bed5d6020c5c35f51
SHA256

d24c4e8d54303a88520e89a4cb971ca82838ee5bdc297c14ffeedfbe8bf7b78f
SHA512

4dad0e742b84f9ec9b8eef9e61510f36abe2e1fc1b74d6b5b7b7110c02d8c2952a2b775bedc1e17918c4b2b46d0cebc5ad933ed99ab66dec236df065e7e5e401
SSDEEP

3072:h6hXgFQIQrs5b5adMSelupcxzLqV164iyA0/7DDZbCq0XZpRHml5fVift:h6NSQhrs5dWKuOJ01lHAk73kq0zol5Y1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddd79118d20f988c84d7a5809acf8d62

Files

ddd79118d20f988c84d7a5809acf8d62
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE