2dd7d18004530936ab822ff67ac96be0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dd7d18004530936ab822ff67ac96be0.exe
Size

15.3MB
MD5

5d7b4e72ff80990804f306dd36314243
SHA1

dc607d1d02294d5bbf1b9e581ba03a8e2572ef85
SHA256

40eacced2415930defe4809f33577bcf16a3a120955a9c2a457d3e5b85f454ed
SHA512

0f8583b10a26bb7bd45c3b57c199de475c051f28e73cb7f9706c714666633421a47119df1f1e9aba8b4fb3f2dcd774c50ca25040e8fc7d022a6e18000a6f2cf4
SSDEEP

393216:U0mUM7NW9rO55IXI78JDpNY2xhawFCWaB33Uqmpv4H4:UYF0em8JLY6E5X09v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd7d18004530936ab822ff67ac96be0.exe

Files

2dd7d18004530936ab822ff67ac96be0.exe
.exe windows:6 windows x64 arch:x64

0df7398ff38ed437c663cdb2a6816d46

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

shell32

ShellExecuteW

Sections

.text
Size: - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fna1F
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.~Ag
Size: - Virtual size: 11.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oWP
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_o
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ