diddyp[.]exe | Triage™

Resubmissions

15/08/2026, 10:57

260815-m19t2svaqa

15/08/2026, 10:54

260815-mzkhrsvapa3

Sharing

Copy URL Twitter E-mail

General

Target
diddyp.exe
Size 4.7MB
Sample260815-m19t2svaqa
SHA256 670d5d401dcc14d0e5829fabfdbb66dad48392cb314c1d67595b1b3e65b75772
MD5 2f5a2b33953ad16ce79c8156154b34c2
SHA1 563fe0569069b425c54e77c9403426801a09549e
SHA512 07727f622c1ab95502bee1d89cea9834e151636d0bb5e18c26d7eccb11a5d0984cefa3d8f165e3f0ed40dacfafe1da4ae26a953041099ece959d8bac91a4d8c4
SSDEEP 49152:uPvkTQzDhQRxi0i0om0dWyD1XVoAOgq17UpJwIX4uzWObPPh1DPXs1cdYZEJcqH:AKkPrD1FTq17UpJwIX4uzWObPPhxs1
TLSH
T11D3628817A92D5B3FC91F2F9442A1A4EF36580B6BB00D34734AFC0A92F4B6B49D615DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
diddyp.exe

File Explorer

diddyp.exe

.exe 4.7MB

diddyp.exe

IMPHASH 78049897a0117e7739e2ff105bb969fd
SHA256 670d5d401dcc14d0e5829fabfdbb66dad48392cb314c1d67595b1b3e65b75772
MD5 2f5a2b33953ad16ce79c8156154b34c2
SHA1 563fe0569069b425c54e77c9403426801a09549e
SHA512 07727f622c1ab95502bee1d89cea9834e151636d0bb5e18c26d7eccb11a5d0984cefa3d8f165e3f0ed40dacfafe1da4ae26a953041099ece959d8bac91a4d8c4
SSDEEP 49152:uPvkTQzDhQRxi0i0om0dWyD1XVoAOgq17UpJwIX4uzWObPPh1DPXs1cdYZEJcqH:AKkPrD1FTq17UpJwIX4uzWObPPhxs1
TLSH
T11D3628817A92D5B3FC91F2F9442A1A4EF36580B6BB00D34734AFC0A92F4B6B49D615DC
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

188544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

python312

PyCoro_Type PyNumber_InPlaceAdd PyFloat_Type PyModule_NewObject PyMethod_Type PyLong_Type PyType_IsSubtype PyNumber_Subtract PyExc_OverflowError _Py_Dealloc PyImport_GetModuleDict PyModule_GetDict PyObject_Free PyImport_ImportFrozenModule PyErr_ExceptionMatches _PyUnicode_InternImmortal PyObject_GC_Del PyObject_CallFunctionObjArgs PyLong_AsLong PyObject_ClearWeakRefs PyObject_Init PyCode_Type PyUnicode_AsUTF8 PyUnicode_AsWideCharString PyUnicode_FromFormat PyErr_BadArgument PySet_New PyList_New PyType_Ready PyModule_FromDefAndSpec2 PyObject_GetAttrString Py_CompileStringExFlags PyList_Append PyBytes_Type PyObject_RichCompareBool PySet_Type _PyLong_New PyObject_GenericSetAttr PyDict_New PyObject_IsInstance _PyDict_MaybeUntrack _PyErr_ChainStackItem PyFrozenSet_New PyByteArray_FromStringAndSize PyModule_ExecDef _PyEval_EvalFrameDefault PyCMethod_New PyNumber_Negative Py_VerboseFlag _PySet_NextEntry PyList_Type PyErr_NoMemory PyObject_Realloc _PyRuntime PyDict_GetItemString PyEllipsis_Type PyDict_GetItem PyImport_FrozenModules PyComplex_Type _Py_NotImplementedStruct PyUnstable_Code_NewWithPosOnlyArgs PyExc_StopAsyncIteration PyArg_ParseTupleAndKeywords PyImport_ExecCodeModule _PyWeakref_ProxyType _PyObject_New PyObject_IsTrue PyObject_Str PyExc_NameError PyModule_Type PyCallable_Check _PyErr_NormalizeException PyDict_MergeFromSeq2 PyModuleDef_Type PyExc_ImportError PyGen_Type PyObject_CallMethodObjArgs PyArg_UnpackTuple PyModule_GetState PyExc_SystemError _PyWeakref_RefType PyObject_SetItem PyAsyncGen_Type PyErr_Print PyTraceBack_Type _PyTuple_MaybeUntrack PyRange_Type Py_GenericAliasType _PyLong_Copy _PyType_Lookup PyObject_Call PyObject_Repr PyByteArray_Type PyArg_ParseTuple PySys_WriteStderr PyEval_RestoreThread PyObject_DelItem PyUnicode_FromStringAndSize PyWideStringList_Append Py_ExitStatusException _PyWarnings_Init PyConfig_SetArgv Py_NoSiteFlag Py_NoUserSiteDirectory Py_SetProgramName PyStatus_Exception Py_DontWriteBytecodeFlag Py_DebugFlag PyConfig_SetString Py_BytesWarningFlag _PyConfig_InitCompatConfig PySys_SetArgv _PyRuntime_Initialize Py_InitializeFromConfig Py_OptimizeFlag PyDict_DelItemString Py_UTF8Mode Py_InteractiveFlag Py_InspectFlag Py_IgnoreEnvironmentFlag Py_FrozenFlag PyStructSequence_InitType PyBool_Type PyObject_RichCompare PyDict_Type PyNumber_InPlaceLshift PyExc_ValueError PyIter_Send PyNumber_Add PyObject_GetIter PyIter_Next PyObject_CallFunction PyMarshal_ReadObjectFromString _PyWeakref_ClearRef PyUnicode_FromWideChar PyExc_AttributeError PySet_Add PyFloat_FromDouble PyFrame_Type PyDict_SetItemString _Py_EllipsisObject PyTuple_New _PyObject_GC_Resize PyModule_GetDef PyBytes_FromString PyModule_GetName PyObject_GetAttr PyComplex_FromDoubles Py_BuildValue _PyImport_FixupExtensionObject _PyErr_WriteUnraisableMsg PyUnicode_Concat PyNumber_FloorDivide PyObject_SetAttrString PyExc_RuntimeError PyList_Sort _PyWeakref_CallableProxyType PyUnicode_DecodeUTF8 PyLong_FromSsize_t PyImport_ExecCodeModuleEx PyEval_GetFuncName PyObject_SelfIter PyImport_ImportModule PySlice_Type PyExc_KeyError PyLong_AsSsize_t _PyArg_NoKeywords PyFunction_Type PyMem_GetAllocator PyThreadState_Get PyOS_snprintf PyCFunction_Type PyObject_SetAttr _PyDict_NewPresized PyBaseObject_Type PyNumber_InPlaceOr PySequence_List PyByteArray_FromObject PyFrozenSet_Type PyModule_GetFilenameObject _PyAsyncGenWrappedValue_Type PyType_Type PyEval_AcquireThread _PyThreadState_GetCurrent PyExc_GeneratorExit PyExc_TypeError PyObject_IsSubclass PyNumber_AsSsize_t PyExc_StopIteration PyUnicode_Type PySequence_Check PyDict_SetItem PyUnicode_Join PySeqIter_Type PyErr_Format PyErr_WriteUnraisable PyExc_SystemExit PySequence_Contains PyEval_SaveThread PyErr_PrintEx Py_Exit Py_MakePendingCalls PyTuple_Type Py_GenericAlias PyUnicode_Substring PyUnicode_FromString PyUnicode_GetLength _Py_TrueStruct PyCapsule_New PyUnicode_Find PySys_SetObject _Py_FalseStruct PyStructSequence_New _Py_NoneStruct PySys_GetObject PyDict_DelItem

kernel32

GetShortPathNameW GetModuleFileNameW SetEnvironmentVariableW SetErrorMode GetEnvironmentVariableW CreateFileW GetModuleHandleA GetLastError CloseHandle GetProcAddress GetCurrentProcessId GetSystemTimeAsFileTime FormatMessageA QueryPerformanceCounter LoadLibraryExW SetStdHandle SetDllDirectoryW GetCurrentThreadId InitializeSListHead SetUnhandledExceptionFilter GetModuleHandleW

vcruntime140

__C_specific_handler memset memcpy memcmp __current_exception_context __current_exception strchr strrchr

api-ms-win-crt-runtime-l1-1-0

_initterm_e _exit _initterm exit _get_initial_wide_environment terminate abort raise signal __p___argc _seh_filter_exe _set_app_type _configure_wide_argv _c_exit _register_thread_local_exe_atexit_callback _cexit _initialize_wide_environment _initialize_onexit_table _register_onexit_function _crt_atexit __p___wargv

api-ms-win-crt-convert-l1-1-0

mbstowcs _wtoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf _set_fmode puts __acrt_iob_func __stdio_common_vswscanf fflush __stdio_common_vfprintf __p__commode

api-ms-win-crt-string-l1-1-0

_wcsdup strcmp strcpy strlen strncmp strncpy wcscmp wcsncmp

api-ms-win-crt-math-l1-1-0

__setusermatherr copysign

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free

api-ms-win-crt-locale-l1-1-0

__initialize_lconv_for_unsigned_char _configthreadlocale