ddf5eea7672b46734a9fe9cf1412dc46da08b23d1ba573186012e229df72d9d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf5eea7672b46734a9fe9cf1412dc46da08b23d1ba573186012e229df72d9d0
Size

91KB
MD5

cc5fad4a73334d1cf8540b3aba81d08e
SHA1

e5740897c779615439d454fd10ec2d2ff35b1eaf
SHA256

ddf5eea7672b46734a9fe9cf1412dc46da08b23d1ba573186012e229df72d9d0
SHA512

2796a3bd76a82862093dfcff57d0c4d90fea7ac2e23eee86f1d44b629fd14dfa9efa9cf6e0b698260593924a6c7211d05b97f43f77347a39cd41ec73e4ca4b15
SSDEEP

1536:n9QHwtRF9ESWu0SWutlggalggEpVp4SaPmPv15EKxVTLJtxoVz8FUDrYYaCusjdc:nIyRF9ESWu0SWuDmhSauvEKxVTLJtxoC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf5eea7672b46734a9fe9cf1412dc46da08b23d1ba573186012e229df72d9d0

Files

ddf5eea7672b46734a9fe9cf1412dc46da08b23d1ba573186012e229df72d9d0
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ