dd0d840f2dab0d27c63f8d3dc053c4561ed318aa9ae4a7760ef0ab678807a5c2N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd0d840f2dab0d27c63f8d3dc053c4561ed318aa9ae4a7760ef0ab678807a5c2N
Size

184KB
MD5

fc0500bd72c457e3a5aa678073692440
SHA1

ffbca7fd41dc05614615342d249c94c3a58eb1a3
SHA256

dd0d840f2dab0d27c63f8d3dc053c4561ed318aa9ae4a7760ef0ab678807a5c2
SHA512

5c8eefeff1786b16a453629e2f0762ef08939199db371b83b0fcc00dbeccb1c0a350ee935cdf2ea25be0785186a06aa561807d1c679781bb3412adf4aa7d9a5e
SSDEEP

3072:mTmB95Vtux3ufkY+5RWYLYQGGOCeVG5sdNmTja40mx9RHPZ4RiFKeW434P0kTl:+49563dY0w8eg5E4DxT6M7S8kx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd0d840f2dab0d27c63f8d3dc053c4561ed318aa9ae4a7760ef0ab678807a5c2N

Files

dd0d840f2dab0d27c63f8d3dc053c4561ed318aa9ae4a7760ef0ab678807a5c2N
.exe windows:4 windows x86 arch:x86

1f22c7ce98016f93bec49d5daa732156

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA

user32

wsprintfA
CloseWindow
CharLowerBuffA
SetWindowLongA
CreateWindowExA

advapi32

RegCloseKey
RegOpenKeyA
RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegDeleteValueA
RegQueryValueA

Sections

.text
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ