c4ccb0ee1bdb9a30fcb1fd82dcd81dcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4ccb0ee1bdb9a30fcb1fd82dcd81dcd
Size

16KB
MD5

c4ccb0ee1bdb9a30fcb1fd82dcd81dcd
SHA1

44c985719b55f6ac28f9f25e7943dba36d1c8bf5
SHA256

0becd2f5ee1e19fcc8cc9cde30175196c3f84c849ebcc088d77c9cf46a173515
SHA512

e0fe26c7ca39ddd173b76b04998a4878d748123a7ca6d1695e7992c4d52afdf081b117dfa1aed5be2bab99cc0c6df3b4c36e022f33a8c1ecb3a0094dc5743b2f
SSDEEP

384:S15mkAJGJxGXj54j5XjZqhJwJMxo/RUI9OwO+s92:SzmkAJkxGXj5w5TZ+wJICLs4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4ccb0ee1bdb9a30fcb1fd82dcd81dcd

Files

c4ccb0ee1bdb9a30fcb1fd82dcd81dcd
.dll windows:4 windows x86 arch:x86

25522e986c75c11353a930692d1910f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

strncpy

ws2_32

inet_ntoa

wininet

InternetReadFile

user32

TranslateMessage

advapi32

RegCloseKey

Exports

Exports

_DllMain@12
load

Sections

.text
Size: 11KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE