ff00c3d0034563da2060b04b86195e69 | Triage

Sharing

General

Target

ff00c3d0034563da2060b04b86195e69
Size

67KB
MD5

ff00c3d0034563da2060b04b86195e69
SHA1

ddd6fed63a196fbd43975bbe51e4b17571f45695
SHA256

56f4620aeadbca72ce09033d016ba4b7ee614c42aca508e10ed837f4d72aff51
SHA512

04f91a23a64288f54004482d7e5f62a7f1c628b43baf818c10c2e47deb06c0d1cd1e42ae0d03596fee8a5f06b317a5e6f9fff53eded619eae69bfaccc0f1aedc
SSDEEP

1536:LkLzh9GfScA9WnYjuq+T87EeJE2jLGNw6WoVCnHVmaBqK:LkfhwxoWnYjrD7EmE2Iw6DQMakK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff00c3d0034563da2060b04b86195e69

Files

ff00c3d0034563da2060b04b86195e69
.exe windows:4 windows x86 arch:x86

238dcc756737d2dca0e506793cd34717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreatePipe
RtlCaptureStackBackTrace
CreateEventA
DelayLoadFailureHook
GetVolumeNameForVolumeMountPointW
EnumSystemLanguageGroupsW
FreeVirtualBuffer
RaiseException
GetComputerNameA
ReadConsoleOutputCharacterW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE