gugcwctct[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gugcwctct.exe
Size

420KB
MD5

ca9bdd34e493dd6845956e91bc6198dd
SHA1

dc7e2961e320ad6d73a60c1e5fc73c1a68b335f4
SHA256

61d0e70c07902a0e78db3e7376ab93a70780ca0b3fe9d7caa1a55539ff2a553e
SHA512

5b60c0da7abe7809a93d8d940ad711f1a6299f7dc1970017b8a2a3ce1ed921bb74961adcdbd4c0466653979ccdbd6e65c69231b5af91beb441e923dfc7b37492
SSDEEP

6144:D+RoM1aHNQFbqcXx6QVXfmt8mLfBCZMF8BTAmJCdcwg02LpdhMpR56I:KhoN+b9XYQRfNmLf0e6TwS0M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gugcwctct.exe

Files

gugcwctct.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ