8cc5272e78a4c8864fac1b0fb3ff3121 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cc5272e78a4c8864fac1b0fb3ff3121
Size

121KB
MD5

8cc5272e78a4c8864fac1b0fb3ff3121
SHA1

18f0d8aefc01eaf70d6187c129b0631c67d00482
SHA256

7bfa19635f75081ff3c946954febec99d269f3e46daafdf2b9a22803b9000677
SHA512

11c29802fdd9555ec51375e5157a661f85c8508c4664d40b6ee4ec8c1380af56a4645c5ab5f9792eec6541588a33de1ae679a8d7569e7fafa948e1e0ac47b4da
SSDEEP

3072:d79PD0lqMSfGPZEZi3bGz2y/QpOJxp8VqtGQ+:1pD0QMSfaZxb42dQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cc5272e78a4c8864fac1b0fb3ff3121

Files

8cc5272e78a4c8864fac1b0fb3ff3121
.exe windows:4 windows x86 arch:x86

9aaca10d9ac8afb412653a54fa3ebc41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCommandLineA
VirtualAllocEx
lstrlenA
IsBadHugeReadPtr
GetACP
ExitProcess
IsBadReadPtr
GetCommandLineW
GetLastError
LoadLibraryExA
ExitThread
GetModuleHandleA

Sections

CODE
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ