7cc37db8dccc65f54cf4819ffcd35059 | Triage

Sharing

General

Target

7cc37db8dccc65f54cf4819ffcd35059
Size

18KB
MD5

7cc37db8dccc65f54cf4819ffcd35059
SHA1

2eacc387ed60941b21913820df05704254aab278
SHA256

55aabd6b17d7e6743da5e5c9f8faaa84e7309b67aff0655b0d45f45b8706d3b6
SHA512

cb32b177f88c29177cdf8df34161e2ba617beca6df48900f04a7a6fdc7ee70b00d7afb5fb0aa2b735cb13309fe4e23b1086bc50e718ffc52399cb3eaa68c56d3
SSDEEP

384:LnTsGo7RelFamctB+R7fP+6PgA3hpsj3QgUTn94XggYK:bIaFaza7X+TA3hpHgUTn9/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cc37db8dccc65f54cf4819ffcd35059

Files

7cc37db8dccc65f54cf4819ffcd35059
.exe windows:4 windows x86 arch:x86

0e0a864814fc22d81ba8f4c08de3138a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE