ffde34d3681543e129155e0a09ee29932b3667c56ca9546a9532fa65b4b2dfbd | Triage

Sharing

General

Target

ffde34d3681543e129155e0a09ee29932b3667c56ca9546a9532fa65b4b2dfbd
Size

72KB
MD5

b1e55c112e85c23eb2b0ab778435afbf
SHA1

8d4ebc95ce928df261160714a29ee7cb94804909
SHA256

ffde34d3681543e129155e0a09ee29932b3667c56ca9546a9532fa65b4b2dfbd
SHA512

9ce8f9044afbe5594137f75b8ecf6168c95c7e9a768c3fc2eee792dd824a64998a8ab9ec7437d6cc1928332ce8d5050a45ef3b397be339e1d9f74475af69afda
SSDEEP

1536:xl6p585dpr3KCUGCsqq2ku2S+Se0uyMWmiCeiq+uKQy6+2OOSGwm6S+yaG2quiCD:f6XY/3KCUGCsqq2ku2S+Se0uyMWmiCe4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffde34d3681543e129155e0a09ee29932b3667c56ca9546a9532fa65b4b2dfbd

Files

ffde34d3681543e129155e0a09ee29932b3667c56ca9546a9532fa65b4b2dfbd
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE