cc1dbf51b8ddb62c08aabb7ad9af9aed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc1dbf51b8ddb62c08aabb7ad9af9aed
Size

124KB
MD5

cc1dbf51b8ddb62c08aabb7ad9af9aed
SHA1

42af89319f85c2862ddec18608bc4c93d1fb373d
SHA256

ed2d9e8a66bc9a6f669fd11a5b954695d8572ec60c986704fc116f63665fd650
SHA512

525bfb6c276f597a1ae00763d066b9789165915b0265b182e125aa67c6fb01159e1039fd4009180534fd0dab69baec2eac1d0ef931f8df056dad3eea73f2b5af
SSDEEP

3072:Y6pYptz5SHahIegiwipshlylUUpcHdKrkheCj58wlj+fC:tY75SHVmbU+25heC3n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc1dbf51b8ddb62c08aabb7ad9af9aed

Files

cc1dbf51b8ddb62c08aabb7ad9af9aed
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

4fbdsv984o.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ