fddd42000e43dd358328aa50cf3aceb93f075ad3cecd9a2cd46543fefdc5c88e | Triage

Sharing

General

Target

fddd42000e43dd358328aa50cf3aceb93f075ad3cecd9a2cd46543fefdc5c88e
Size

188KB
MD5

600e2b50e0587a707747d1154198f741
SHA1

ff42407b3ab72d3fbd4d8428387c58f09ad7fcee
SHA256

fddd42000e43dd358328aa50cf3aceb93f075ad3cecd9a2cd46543fefdc5c88e
SHA512

947e1bfdf8500372408f0248b3b0e2afd8803918bcd774a63703ed40956d1513bfab1944e89a0ff9162dc823da8668c4729d3371a686a18c6ed3cd0b31d6edec
SSDEEP

3072:ZfCT/oXBcT7JkjkstZ1uy/Z17mko9Ceax/FW71YxoSjveP4/rUuUq:ZZxcx8J5uybal9Ce8w712oSesQuUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fddd42000e43dd358328aa50cf3aceb93f075ad3cecd9a2cd46543fefdc5c88e

Files

fddd42000e43dd358328aa50cf3aceb93f075ad3cecd9a2cd46543fefdc5c88e
.exe windows:4 windows x86 arch:x86

42b0ca4b2d838a730d7cd383b0c9cbdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
ExitProcess
GetCurrentProcess
LoadLibraryA

user32

CloseWindow
wsprintfA
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegSetValueA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegEnumKeyA

Sections

.text
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ