ddf2855b95c54929[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ddf2855b95c54929.exe
Size 6.2MB
Sample261030-qrdl2aef88
SHA256 ddf2855b95c54929b463d2d43ab81e67698f2c6c5fe6a254d957b7f84379aada
MD5 8c6fc1da0ea229b79ebbdd26a07069cc
SHA1 123fd813fe11958d0b6412b6641037319cc7e137
SHA512 7983c4220b035bb1ef37113872b25856c442858e3ddf830d70f5e7f675aa6ca57579b18c2dc6a2a70de3c1c886c869149aac237fd5d71c95118070ee2c8c1b25
SSDEEP 98304:7fZq0Z1+F2LWNmfTrbTAt8GLf6BxDa3gLCLk/JcLwv7s0bH5Jt1FeMjVcI:7fZx1+YuUTrf94wLCLk2LMzHXX
TLSH
T1EE663394D6A44A5CCCE18DBE4DE2ABBD27A2E930570105CBC160DE715D3B2E87F3624B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf2855b95c54929.exe

File Explorer

ddf2855b95c54929.exe

.exe 6.2MB

ddf2855b95c54929.exe

IMPHASH 0277d64a0ebf518357b49560b0e7f353
SHA256 ddf2855b95c54929b463d2d43ab81e67698f2c6c5fe6a254d957b7f84379aada
MD5 8c6fc1da0ea229b79ebbdd26a07069cc
SHA1 123fd813fe11958d0b6412b6641037319cc7e137
SHA512 7983c4220b035bb1ef37113872b25856c442858e3ddf830d70f5e7f675aa6ca57579b18c2dc6a2a70de3c1c886c869149aac237fd5d71c95118070ee2c8c1b25
SSDEEP 98304:7fZq0Z1+F2LWNmfTrbTAt8GLf6BxDa3gLCLk/JcLwv7s0bH5Jt1FeMjVcI:7fZx1+YuUTrf94wLCLk2LMzHXX
TLSH
T1EE663394D6A44A5CCCE18DBE4DE2ABBD27A2E930570105CBC160DE715D3B2E87F3624B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RemoveDirectoryA SetCurrentDirectoryA FreeLibrary GetTempPathA LoadLibraryExA GetFullPathNameA GetCurrentDirectoryA DeleteFileA GetTickCount LoadLibraryW LoadLibraryExW InitializeCriticalSection DeleteCriticalSection IsBadReadPtr WriteProcessMemory GetCurrentProcess WideCharToMultiByte Sleep GetDiskFreeSpaceA MultiByteToWideChar SetFileAttributesA CreateDirectoryA _lcreat FindFirstFileA WritePrivateProfileStringA GetPrivateProfileIntA GetProcAddress CreateThread CloseHandle ResumeThread SuspendThread WinExec GetACP GetSystemDirectoryA CreateEventA OpenEventA GetModuleFileNameA _lclose _llseek _lread _lopen GetFileSize lstrcmpiA lstrlenA lstrcpyA GetWindowsDirectoryA lstrcatA LocalFree _lwrite FindClose LoadLibraryA FindNextFileA GetModuleHandleA OpenFile VirtualAlloc HeapCreate WriteFile SetUnhandledExceptionFilter VirtualFree GetStdHandle LocalAlloc GetFileType SetHandleCount GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter TerminateProcess ExitProcess HeapAlloc HeapFree GetVersion GetCommandLineA GetStartupInfoA RtlUnwind IsBadWritePtr HeapDestroy IsBadCodePtr HeapReAlloc HeapSize

user32

GetCursorPos ScreenToClient SetDlgItemTextA EnableWindow MoveWindow RegisterClassA GetWindowRect SetWindowPos PostMessageA GetDlgItem ShowWindow GetDC ReleaseDC DrawIcon LoadCursorA LoadIconA CreateWindowExA SendMessageA LoadStringA wsprintfA UpdateWindow GetClientRect DefWindowProcA BeginPaint EndPaint PostQuitMessage GetMessageA IsWindow IsDialogMessageA TranslateMessage DispatchMessageA EndDialog DialogBoxParamA DestroyWindow CreateDialogParamA ExitWindowsEx CheckDlgButton SetTimer MessageBoxA GetDesktopWindow GetClassLongA GetDlgItemTextA SetClassLongA KillTimer IsDlgButtonChecked SetWindowTextA

gdi32

DeleteObject StretchDIBits RealizePalette SelectPalette CreatePalette SetStretchBltMode

advapi32

RegOpenKeyA RegCloseKey RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCreateKeyA RegSetValueA RegQueryValueA

shell32

SHGetSpecialFolderLocation SHBrowseForFolderA SHGetMalloc SHGetPathFromIDListA

ole32

CoInitialize CoUninitialize CoCreateInstance

comctl32

ImageList_LoadImageA ord17

winmm

ord2

Name

.text

Size

62KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ddf2855b95c54929.exe

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

winmm

generic