ddf0e9c76c28a829558361e667f15e2d | Triage

Sharing

General

Target

ddf0e9c76c28a829558361e667f15e2d
Size

358KB
MD5

ddf0e9c76c28a829558361e667f15e2d
SHA1

c5029ee384942eb594808e3c3ad94c3a0ab4db54
SHA256

bf04c4e329a60d12172c802db9b64d23085e3df27d4371b1c4d435a0a4c7b11a
SHA512

790aea05f1b9ae016285bcb0ad03e25a2ff5525848d99f5db65e44768787133460c0d6afa783e8be894d2d3bd6e914c98135c189db10ce10c0df12595a416ffd
SSDEEP

3072:1WqwCXWDNaYSFzvhNYbMYXSRw0XlzK7HoFi4l2sjgZpbylRsze8b:AX3SF1xRwmzpFi62sjgZpbylf8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf0e9c76c28a829558361e667f15e2d

Files

ddf0e9c76c28a829558361e667f15e2d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\PHEN-CDW1-V3SMOD\src\src\ExternalProcess\AddinHost\Lenovo.Vantage.AddinHost.x86\obj\Release\Lenovo.Vantage.AddinHost.x86.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ