ddf1758867b01ffd032f11239f758fdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf1758867b01ffd032f11239f758fdd
Size

50KB
MD5

ddf1758867b01ffd032f11239f758fdd
SHA1

cc6f1b165147004c499cd76e503c8b73ef0dd651
SHA256

29c419d5c108a16ad5df72465c1ce82b1ec9045565f605d93ac982a83e7ff327
SHA512

7eb8898cacb661087dcb4367530aad648155febf476b0cd4cc5d3101e6a436cc67f90ea5cbb295ca22a238dd71f89f77108866f6bf4f03f524949fb3574f64d8
SSDEEP

768:nCpqFQcwuU/4okM0p468MxNW9CY4ODaB5LKepSH2C4ltNiU0tNAVzhE018xg:CpqFQ3Q80p4panY4h3ZviDN8NE0Cxg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf1758867b01ffd032f11239f758fdd

Files

ddf1758867b01ffd032f11239f758fdd
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ