dingding[.]exe | Triage™

General

Target
dingding.exe
Size 17.0MB
Sample260821-tcwe3sshne
SHA256 5acbb6ee89b38eb2abf81a2b2349a4c97e7c2dd23ad4daf8d5b5b113176fef53
MD5 04e3a5e74513b7cc7eb540940299806e
SHA1 002048e6ec82b326fe6bae4b6bac64de8e545026
SHA512 dd22c723e205b8244ecc9f53d0be08f3e712cb94e9c3b4c70747356e483481cdfd2a04c42d9c77b66759b954ce0734e343ee54d3c17c60c345693bde2358e04d
SSDEEP 393216:Oz7+P6gzjM/5IqMDF35s6pLNPX29pgbmjz0diOgJCJLouDW4iV:U7cT1/NpI9ymjz0VvHK4iV
TLSH
T1A90733057991C6D4F7C272B9261C62F3837A4F6A183AD9FF24B072611BF5BC7D1120AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dingding.exe

SHA256 5acbb6ee89b38eb2abf81a2b2349a4c97e7c2dd23ad4daf8d5b5b113176fef53
MD5 04e3a5e74513b7cc7eb540940299806e
SHA1 002048e6ec82b326fe6bae4b6bac64de8e545026
SHA512 dd22c723e205b8244ecc9f53d0be08f3e712cb94e9c3b4c70747356e483481cdfd2a04c42d9c77b66759b954ce0734e343ee54d3c17c60c345693bde2358e04d
SSDEEP 393216:Oz7+P6gzjM/5IqMDF35s6pLNPX29pgbmjz0diOgJCJLouDW4iV:U7cT1/NpI9ymjz0VvHK4iV
TLSH
T1A90733057991C6D4F7C272B9261C62F3837A4F6A183AD9FF24B072611BF5BC7D1120AA
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

76434

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths