dd47af8abbaa1f25a81e492da904b01b56bd36a8b86154ca08ce7cede822f4a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd47af8abbaa1f25a81e492da904b01b56bd36a8b86154ca08ce7cede822f4a3
Size

9.5MB
MD5

2bc5bd96a2722d5d73a3e420364e66ba
SHA1

93c39f8f573661615c66c57e921bcaeab0cf628c
SHA256

dd47af8abbaa1f25a81e492da904b01b56bd36a8b86154ca08ce7cede822f4a3
SHA512

0c7606540e8750802f7858a519a8dec55564ac54791e00b945a2a7d815b88a92458f6525d52ee57217362a81b723248428034493069dc579d0b5a1ec05e74a77
SSDEEP

196608:AnbEa/RmuBwuRiWSosfrjhqGyHhQMERYd4P1/DfTEKxKHSwaRdzIp:9IPBwuRzSo+rjhqGW6JRYd4t/DCAzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd47af8abbaa1f25a81e492da904b01b56bd36a8b86154ca08ce7cede822f4a3

Files

dd47af8abbaa1f25a81e492da904b01b56bd36a8b86154ca08ce7cede822f4a3
.exe windows:5 windows x86 arch:x86

12c52c479892c07cc10d1f49a5966943

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.D|;
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lot
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wk0
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ