ddcacd894280453eff2a06fed2994e57b701477c7af50d538f43f5c40c37cfdf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddcacd894280453eff2a06fed2994e57b701477c7af50d538f43f5c40c37cfdf
Size

575KB
MD5

067c6c205e6f34d0d72f21bf04038c94
SHA1

85172e724df5e0b38eba67994b3809bd8b89ccea
SHA256

ddcacd894280453eff2a06fed2994e57b701477c7af50d538f43f5c40c37cfdf
SHA512

66d04d9176d5d95937af854fa19411d1fe84ec573253dc129496e656ad99002290308b679ae8dfc28a5d823bb38c9cea46d297b795ac8c4014a9d6cd26890aa3
SSDEEP

12288:Wl+ggbxIdVc0LXmbw3FTRZ0GSpTiMDGOzEoAFYWimR0o8H1u:4GxMVPL2klAZZ5MqWiaB8H1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddcacd894280453eff2a06fed2994e57b701477c7af50d538f43f5c40c37cfdf

Files

ddcacd894280453eff2a06fed2994e57b701477c7af50d538f43f5c40c37cfdf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

CYAY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 573KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ