fccac61e5dd816f13bd1a833654337a2 | Triage

Sharing

General

Target

fccac61e5dd816f13bd1a833654337a2
Size

283KB
MD5

fccac61e5dd816f13bd1a833654337a2
SHA1

9d9a99d8e4b803051390c4416702074d95958659
SHA256

39aee9b99b35ec7da65d262d2ebad112bc43883503625f8071fcb31a6c22c75b
SHA512

65c209385e18a187616b0ee390c879eb08342d0c692cd3ecd7feeb97885cf88b1d207fe26a195970effbf5f8e33a76be28d6890aa6cc189c0f1206e092699946
SSDEEP

6144:q8RnXBH5Yi/UgvTnSR6OeHqmozj3vyuJ4y89n/k5Yo0B0Upa:fNXBHyi7zSRWqx36u3Gk5Yo0B0j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fccac61e5dd816f13bd1a833654337a2

Files

fccac61e5dd816f13bd1a833654337a2
.exe windows:4 windows x86 arch:x86

d740c6b869dac154ef6e51097ce3173a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex

user32

RegisterClassA
LoadAcceleratorsA

netapi32

NetDfsRemoveFtRootForced

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE