cc6375810af96b389f9403590a756cd3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc6375810af96b389f9403590a756cd3
Size

6KB
MD5

cc6375810af96b389f9403590a756cd3
SHA1

e12f18e3d7039f194e90343138936652c8c4c6b1
SHA256

ab8d060279fa4395aa8d753b745304b5f41add080643477bea25faa932ce47e2
SHA512

b4d282f38f743f9f046b8f7e4765b0a368bd34854bc61cb324aea00fc5e73955c0b63f07894d38c9ea4a0d887bec4992adb43863a69e4248d7c1e1d05e776977
SSDEEP

96:sB+QBfN+KQTtRogtYZxa9ZmkUCOArVmvE0D0IvZXB7KxOg/O3X:srB0btRoLZsAjLAr4vE0Dj7KOg/KX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc6375810af96b389f9403590a756cd3

Files

cc6375810af96b389f9403590a756cd3
.exe windows:4 windows x86 arch:x86

097d53d23ab4b5e1e5482eace312d019

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesW
ExpandEnvironmentStringsA
OpenSemaphoreW
WritePrivateProfileStringA
SetComputerNameW
FoldStringA
GetDefaultCommConfigW
CreateJobObjectA
FindResourceExW
CreateSemaphoreA

user32

GetAltTabInfoA
GetMonitorInfoW
GetUserObjectInformationA
BroadcastSystemMessageA
PostMessageW
RegisterClassA
EnumWindowStationsA
IsCharAlphaNumericW
DdeQueryStringA

gdi32

GetLogColorSpaceW
CreateFontIndirectA
EnumFontFamiliesA
EnumFontsA

Sections

.tls
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ