dffa3756657be744e4be6a4fccd52daf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dffa3756657be744e4be6a4fccd52daf
Size

83KB
MD5

dffa3756657be744e4be6a4fccd52daf
SHA1

a4a178bc0d3b265f2ecc70547d198c4f986c8123
SHA256

fafa971e97dcc821cf743f016c37d9708b38af14afde575e5e0b0b454196248f
SHA512

f00de21e4cc3cb069d25699188b68148a02bc568e4bc61ffdd0868b8acdcbdbc43b28f8e080a24f4597648582c9000c4aae0f8e2788dbb177ea12577e1d79ccb
SSDEEP

1536:c0wo4w8751OCTsyXQfFN/NdtLqlzhCwLkjEErxTWDTMqhGKYIZTET8bDQ:c0wo4nOCYyA53LqvCwgjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dffa3756657be744e4be6a4fccd52daf

Files

dffa3756657be744e4be6a4fccd52daf
.exe windows:4 windows x86 arch:x86

106e1d5f8cc8dbfb52e4196b8d34dc61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerA
LZOpenFileW
BeginUpdateResourceW
GetFileSizeEx
GetProcAddress
CompareFileTime
CreateActCtxA
CreateThread
UnhandledExceptionFilter
GetNumaHighestNodeNumber
VerSetConditionMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE