dd392e21ae896d93ca79521a066c78b2bfcd8c53d5444517f140f76efeb40e2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd392e21ae896d93ca79521a066c78b2bfcd8c53d5444517f140f76efeb40e2a
Size

3.7MB
MD5

4f2f6d9f16e22e41751ba7bdd30e9591
SHA1

403d60075bbaed0ba8212c597d867da245aecc92
SHA256

dd392e21ae896d93ca79521a066c78b2bfcd8c53d5444517f140f76efeb40e2a
SHA512

f4d323e19fb121756f3b2497855510bc79d8ddf4790cbb60cdc103a7048b8d07c323f1b05ede20fce51db4024201b3d255d82fea4e566e1530f7de82492c9b34
SSDEEP

98304:y7HsotLw9yMr8wZvj/Zf/qyf3oZ3gJiClXmW2T31ot3KXGER:yMmwD8+LRH3f94CliTFfGY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd392e21ae896d93ca79521a066c78b2bfcd8c53d5444517f140f76efeb40e2a

Files

dd392e21ae896d93ca79521a066c78b2bfcd8c53d5444517f140f76efeb40e2a
.exe windows:4 windows x86 arch:x86

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

Sections

.text
Size: 451KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE