dde4acaea5ba8d2a57d158487af6964e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dde4acaea5ba8d2a57d158487af6964e
Size

12KB
MD5

dde4acaea5ba8d2a57d158487af6964e
SHA1

6a66a9915ef0d1541d59e3a14cecacf1139e3e06
SHA256

385dfae3c070939492c89f0dfb75cd2d2f39065c592317452c7841e1ae0bd3c6
SHA512

ebdf7aefdf014c31bbf722e4c74e31e174debbf0152c41a93e607c3bf25b85ada053a2a466719bb7ecb1ba7ea89fba3e28de06b3ad263c8441d45bb3cfaa2938
SSDEEP

96:ctMYdx0MSqg/5flU/ZWbfFFyOmT1amnWFk71yQtQKQYQ:c6YdxH7sdlkZWDFIJZB7MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dde4acaea5ba8d2a57d158487af6964e

Files

dde4acaea5ba8d2a57d158487af6964e
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ