dda4effc9ee8f0e3d963df29a871596de1fd56a6e9f4064856ce79659b6a3ceb | Triage

Sharing

General

Target

dda4effc9ee8f0e3d963df29a871596de1fd56a6e9f4064856ce79659b6a3ceb
Size

120KB
MD5

829fd0b7229a07701d1da61697f63d6e
SHA1

4f9e2bc156227ae9626028fb8a4d16dd7f1be18e
SHA256

dda4effc9ee8f0e3d963df29a871596de1fd56a6e9f4064856ce79659b6a3ceb
SHA512

3b7483d062dd1ee86033a5b1044ec20c1e8cb4515a4d78d94fffa7d3ff690c0cab17cfb587d2853c1c3dd62c29c751e87f28016864adb7f8555075faaafb191a
SSDEEP

1536:tk1KacN4BrQjZ3PeeFb5GbiAYZcWi/oEASG41rokP4VxMjuYQSVJxVmfgHhBYefG:qLE3ZxF9LZfqztckP4VxERQsVbBnUQH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dda4effc9ee8f0e3d963df29a871596de1fd56a6e9f4064856ce79659b6a3ceb

Files

dda4effc9ee8f0e3d963df29a871596de1fd56a6e9f4064856ce79659b6a3ceb
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ