ddeb5c658e61872eb044c1bd709ef707 | Triage

Sharing

General

Target

ddeb5c658e61872eb044c1bd709ef707
Size

57KB
MD5

ddeb5c658e61872eb044c1bd709ef707
SHA1

afe1ba4557479efedf10e6cd09e6f69c0911122c
SHA256

6c007301e3f1a4686c6c38eb70db4860915f902de7c44bee2be3b0e36a811239
SHA512

4d0155e140e1378a7c84b0e3bb42424da2e3c3f2ff122263ba19a6bfa99f062f9dd60fe79b8a39a8c2b67ae45727dc10d3f000e054c49f97e1de700f67cce055
SSDEEP

1536:un9J3+sZCI/opFoHipFRPvK1ME4FXsFNS:4hVCI/wei3s1MEsXsFNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddeb5c658e61872eb044c1bd709ef707

Files

ddeb5c658e61872eb044c1bd709ef707
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE