3ccdd27572c63b26852f7b72e7d2e1cb | Triage

Sharing

General

Target

3ccdd27572c63b26852f7b72e7d2e1cb
Size

650KB
MD5

3ccdd27572c63b26852f7b72e7d2e1cb
SHA1

f1934ea90cf7a12fb2201fd568048ada23e01aae
SHA256

a2139ed7146523c89fdf4b003272d687cafad72f8aeabb6c60b5c18e14d2bc1f
SHA512

0fa46a4c97bec6c978e74bf0a86b585f5d5687c1a8f91f8caac7bef55b2466c89efae9ad3834b8c7c62ede7fbd76ec24dba7df2937da8e4ba7c7e39379df8601
SSDEEP

12288:rV7ERa+xljIOjOo6DxqjuSukDwXQVdtsjFL0ItVlf/4QHfeYFOkcj6b7MP+Dd2+k:rlGa+rjdx8KMkD0QhsjFL0ItteYFlN7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ccdd27572c63b26852f7b72e7d2e1cb

Files

3ccdd27572c63b26852f7b72e7d2e1cb
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HideProcess
ShowProcess

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ