ddeccd794178271a9a32558849699240 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddeccd794178271a9a32558849699240
Size

188KB
MD5

ddeccd794178271a9a32558849699240
SHA1

3e2d488587c6a83b83a81e0d83b5d1422621cd56
SHA256

6649818718ea966ce188674fc7384682b2cfe428f42fa1092cfa7762b2fe06b5
SHA512

2f3327234f8c084a2c25992a27ccb5be267925ec2c8171239d09a56d1e0ff6af326c2b48149d49d412af85b5396a1323a51500f7239dcaa50ce65ea5bbe1d277
SSDEEP

768:cAjOOAt6Zmb40crNWVeEJbNaN37ZLcP8xI4iEynjqCPCbCfrtT/GIux2OTUWn07c:cAjOOAt6Zmbw8LsBtIPVRjqC68MLCgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddeccd794178271a9a32558849699240

Files

ddeccd794178271a9a32558849699240
.exe windows:1 windows x86 arch:x86

62f25ec872dc61d9284cf7042f80a755

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

DeleteFileA
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetTickCount
CopyFileA
RtlUnwind
SetFileAttributesA
Sleep
CreateMutexA
CreateThread

user32

GetWindowTextA
GetForegroundWindow
GetKeyState
GetAsyncKeyState
CharUpperBuffA

advapi32

RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA

ws2_32

WSACleanup
inet_addr
htons
getsockname
socket
gethostbyname
connect
closesocket
WSAStartup
send
select
recv

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
atoi
exit
fputc
localeconv
memcpy
memmove
memset
pow
raise
rand
signal
srand
strcat
strchr
strcmp
strncmp
strncpy
strstr
strtok
strtol
wcslen
wctomb

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 69KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE