ddbc5008edd056c040817732d5738abd0af6f82b74c4fae19afceeabe7b22da9[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddbc5008edd056c040817732d5738abd0af6f82b74c4fae19afceeabe7b22da9.exe
Size

2.6MB
MD5

ddd04f1d061904749d2bce2e1be56420
SHA1

cfaee109d3c97074a5fe24dbac7b64b3875ad4e5
SHA256

ddbc5008edd056c040817732d5738abd0af6f82b74c4fae19afceeabe7b22da9
SHA512

21bc8c47216bbf1431568cde8a55aa60f57e79431508ff491794142d471f08ba8728750b3e6e702fc0129088a9175dd964cddfc4d785fc1d594119388b6aadc3
SSDEEP

49152:8BFIGzl11KmxmcZMqg9JpjRTmd/v9yKBESoE0V:wIGR11KmxmcZVgrpgd/v9HESWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddbc5008edd056c040817732d5738abd0af6f82b74c4fae19afceeabe7b22da9.exe

Files

ddbc5008edd056c040817732d5738abd0af6f82b74c4fae19afceeabe7b22da9.exe
.exe windows:5 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

Sections

Size: 79KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xfvwtqso
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rxigenvn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ