8cc94beda839f8085359f900bd6f59c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cc94beda839f8085359f900bd6f59c5
Size

261KB
MD5

8cc94beda839f8085359f900bd6f59c5
SHA1

b8f7714dc0b1a2ead051e6d882d4a981ec1c5413
SHA256

870912a27649cce172d00d10801f09a467565498d3ec5e9490f1d8fac1337fd8
SHA512

9f6dcf7d2ee17714be48f094250c89150db8702a313e3de36f6588a386cf972eecbf7c5a9f91986567d39cf43c53392ff249f06d0e727b5d36b39df92321b9ef
SSDEEP

6144:e0eShiJnv9AbblIKbKu59fvRFWl15I8/QBLOmuzU+:7YcIKbKu59fvRFWl15I8/QBLOmuz9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cc94beda839f8085359f900bd6f59c5

Files

8cc94beda839f8085359f900bd6f59c5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Carbon.pdb

Imports

mscoree

_CorExeMain

Sections

\nk]JEg
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ