01cc284fd7ef31a3ece9baaa975d3c68 | Triage

Sharing

General

Target

01cc284fd7ef31a3ece9baaa975d3c68
Size

168KB
MD5

01cc284fd7ef31a3ece9baaa975d3c68
SHA1

e8e6019e22d1ffcbafee1cafecf05d8ba9ce467e
SHA256

433f9163963b6ffd3f17841c3c070a2d0df6e759e787d2447620c6a03df2283a
SHA512

549c7c8c34f8fda8f91bc71cb8bf9fc7cc4a4ee3992f37f7de852bceb7d7427111ca9f274b6966d53f4c684d8aa4ed57a0375874375da6e2c71d2b760c181438
SSDEEP

3072:dYcU5XUtnJeK3eUTm3o/5TSuglznXtNLRa4NAMFtB+XSFWjaMTBwac2LWM5:dkXU2K3eUy3GNwjzlVLmMMTG8Lb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01cc284fd7ef31a3ece9baaa975d3c68

Files

01cc284fd7ef31a3ece9baaa975d3c68
.exe windows:4 windows x86 arch:x86

b11ea2dd04507c0fe52aba3f4836b5f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetProcAddress
GetModuleHandleA
GetStartupInfoA

msi

ord204

msvcrt

_exit
strlen
_cexit
exit
_acmdln
_XcptFilter
_c_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
__getmainargs

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ