c87ffbc44d41caf94bfc7205a5cbc111 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c87ffbc44d41caf94bfc7205a5cbc111
Size

256KB
MD5

c87ffbc44d41caf94bfc7205a5cbc111
SHA1

9035a95e106e8bd217fffc8bcc1e0363dcc67e43
SHA256

ed22345dc79f120cf8f268e0b7491f73babf643ee70b448ccd91eb79bd4cc177
SHA512

3172adec1ca1fef5eeeb968f201326e71c1286d59338327d7ae54e5b5f8036d3a0e4134d54a816b7155d3250e2bc5f7016accd489b3e4d87228404471f6b4bd2
SSDEEP

6144:ynko4L2rTfsU9vPIAYnYVv2acCsxYNmpzg:yGEb9vAqoUsximp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c87ffbc44d41caf94bfc7205a5cbc111

Files

c87ffbc44d41caf94bfc7205a5cbc111
.exe windows:4 windows x86 arch:x86

4d8e9e06f8e51550e3e5089179e9846d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE