dffd5f7bd2bfb0ce7b0260b41ac97e42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dffd5f7bd2bfb0ce7b0260b41ac97e42
Size

80KB
MD5

dffd5f7bd2bfb0ce7b0260b41ac97e42
SHA1

a40d33948c85fedf93e96fbfeaf6dfc85fa075f1
SHA256

9ae88b2c6e809c96aab8cc6bfd2873c7f8244089d29243e35fb7905b0e1a3083
SHA512

236cad98a07ffa4133f8def1fba7130cd292eaccef040cfbb2bf83620cf4cdb08cdc7b3705abe69e640e2bf311b91a2a914418ad3c0863931d8ba2a2ebea76ef
SSDEEP

1536:8LABvCDLaqjp/5LMzxihKRuml3fIMXGl2nxZJmypvM8IT7E4D8/ZG:8eCDLaqj95LMdUKpXGgnDJmypvM8mD4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dffd5f7bd2bfb0ce7b0260b41ac97e42

Files

dffd5f7bd2bfb0ce7b0260b41ac97e42
.dll windows:4 windows x86 arch:x86

9f76c9faf41fb9794b73a08d5a39fc39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
ExitProcess

user32

GetDC
BeginPaint
TranslateMessage
GetDesktopWindow

gdi32

Arc

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 70KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE