8cc2b86c521840a14d171687acfaf578 | Triage

Sharing

General

Target

8cc2b86c521840a14d171687acfaf578
Size

23KB
MD5

8cc2b86c521840a14d171687acfaf578
SHA1

55614892c7238f4986713e663a985a28830d53c4
SHA256

363c789e93b3efb24d4640cab43e02f7d047a847f36c1b9e95b2f6b54b5b9c74
SHA512

e7e54ec43f5aa605e314bbd8c3ce9583300d52950862c035ee8230f0c5a2c3df153f51001dbcc22dd0ab39bfe11eb375247228dbd2412177899010c8ab350daf
SSDEEP

384:JxJiiYnZOANKQtgv7a7vs35uelCk/0YvRSeg+AWvKIvR+9bcVNgcX6WdzIw5IoKY:7GUANrt5va5uI8nj+AWvS9bcfgcXXNI+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cc2b86c521840a14d171687acfaf578

Files

8cc2b86c521840a14d171687acfaf578
.exe windows:4 windows x86 arch:x86

f446ad4ac5ffa1483424b56aab21cbf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualProtectEx
CreateProcessA
GetCommandLineA
SetThreadContext
GetThreadContext
ResumeThread

gdi32

SetTextColor
CreateDCA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE