ddfc446abf8c0ed964140ae0577ab6df88005cd8d9a8de5bf8b483d7df4fdcb3

Sharing

Copy URL Twitter E-mail

General

Target
ddfc446abf8c0ed964140ae0577ab6df88005cd8d9a8de5bf8b483d7df4fdcb3
Size 51KB
Sample260826-15fcwsff64
SHA256 ddfc446abf8c0ed964140ae0577ab6df88005cd8d9a8de5bf8b483d7df4fdcb3
MD5 fe2c3111dffffa56c01f7a52062ada4c
SHA1 50c94c1a8ba6c171861965d5631d3945ae1cd945
SHA512 849947068eee5c3ab68c641850debc3972ee5fb3e8134b6ab9c93669205395ef0d7832c632c5a359ef759683f782c87d19b07c564428b33e431301ef36854935
SSDEEP 768:OQX6X3b0JResUcqyBq2W5lICSV5K8Z4jUJFWimW7T2PRW:OicwJbNq2W5lIPV5K8Z4jMUST2P0
TLSH
T15133A4C2D68160A8E81A5D34147A5DBB4A773F65FC6CF6A5EE88F5172BB32C21432C13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddfc446abf8c0ed964140ae0577ab6df88005cd8d9a8de5bf8b483d7df4fdcb3

File Explorer

ddfc446abf8c0ed964140ae0577ab6df88005cd8d9a8de5bf8b483d7df4fdcb3

.exe 51KB

ddfc446abf8c0ed964140ae0577ab6df88005cd8d9a8de5bf8b483d7df4fdcb3

IMPHASH 7fb966d83116e9393b1c77a9ab23a4bd
SHA256 ddfc446abf8c0ed964140ae0577ab6df88005cd8d9a8de5bf8b483d7df4fdcb3
MD5 fe2c3111dffffa56c01f7a52062ada4c
SHA1 50c94c1a8ba6c171861965d5631d3945ae1cd945
SHA512 849947068eee5c3ab68c641850debc3972ee5fb3e8134b6ab9c93669205395ef0d7832c632c5a359ef759683f782c87d19b07c564428b33e431301ef36854935
SSDEEP 768:OQX6X3b0JResUcqyBq2W5lICSV5K8Z4jUJFWimW7T2PRW:OicwJbNq2W5lIPV5K8Z4jMUST2P0
TLSH
T15133A4C2D68160A8E81A5D34147A5DBB4A773F65FC6CF6A5EE88F5172BB32C21432C13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

732B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ddfc446abf8c0ed964140ae0577ab6df88005cd8d9a8de5bf8b483d7df4fdcb3

kernel32

msvcrt

generic