ccc4fcae873bf41b530f371ec151a80b453a8efa8db7236683bbb6e7f9d90e6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccc4fcae873bf41b530f371ec151a80b453a8efa8db7236683bbb6e7f9d90e6e
Size

6KB
MD5

d96c84ff08e00b91e530dbfc8d2b65d5
SHA1

fa7ba667a5d3c95c18af02bc7d23a7f3cb302ac8
SHA256

ccc4fcae873bf41b530f371ec151a80b453a8efa8db7236683bbb6e7f9d90e6e
SHA512

daf412611216bebaa9f260471a8907360db1e2db46467908998f1ef99d72fb9b258ceae53757de9a4d3d4607c0d9cdbc55a329a04362a9ee5225e39c5f4103dd
SSDEEP

48:S7bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uBO:60mIGnFc/38+N4ZHJWSY9FI5Wqyx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccc4fcae873bf41b530f371ec151a80b453a8efa8db7236683bbb6e7f9d90e6e

Files

ccc4fcae873bf41b530f371ec151a80b453a8efa8db7236683bbb6e7f9d90e6e
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ