ddfbda3608cb5a58376e8f299ec6ef52

General

Target

ddfbda3608cb5a58376e8f299ec6ef52
Size

142KB
MD5

ddfbda3608cb5a58376e8f299ec6ef52
SHA1

e42b683061a20dd3a958df84346462236d881a1e
SHA256

eaff445be0045b4a739bc145a23c7f11b289c28c8ee3b73b0b43e11fd0f75eef
SHA512

88bd8ca15ab898332f5da1b86042ae03ae8316c7b606747d97f27471e73ee1a41abb0551cd847a532316e7f12a7e81b748462802a2bca7bcb1a60b0f9a328de7
SSDEEP

3072:5eCEj0saIRJmJmqFEOlHyP708m92oKiqRWnB9wq:5eCExcF/lSgx9rUuz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddfbda3608cb5a58376e8f299ec6ef52

Files

ddfbda3608cb5a58376e8f299ec6ef52
.dll regsvr32 windows:4 windows x86 arch:x86

79a6c50e30330593d2708d97e687698b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DestroyMenu
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateMDIWindowA
CreateIconFromResourceEx
CreateDialogIndirectParamA
CreateDesktopA
CreateCursor
CreateAcceleratorTableA
CharUpperBuffA
BeginPaint
ActivateKeyboardLayout

kernel32

GetLastError
lstrcpynA
lstrcmpiA
VirtualFree
TlsSetValue
Sleep
SetLastError
SetCurrentDirectoryA
RtlUnwind
ReadFile
RaiseException
OpenFileMappingA
OpenFile
MapViewOfFile
EnterCriticalSection
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
GetCommandLineA
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetSystemTime
LeaveCriticalSection
LocalAlloc

Exports

Exports

A075FFBB2BE2F4b1dB4ABA49FBCC7AC23
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
NotifyLogon
NotifyShutdown
NotifyStartup
ah

Sections

.text
Size: 16KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79a6c50e30330593d2708d97e687698b

Headers

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 232KB

.data Size: 121KB - Virtual size: 124KB

.rsrc Size: 1KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.data Size: - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 232KB

.data
Size: 121KB - Virtual size: 124KB

.rsrc
Size: 1KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.data
Size: - Virtual size: 4KB