cc09d90e0871dda6f848527f88ff441e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc09d90e0871dda6f848527f88ff441e
Size

736KB
MD5

cc09d90e0871dda6f848527f88ff441e
SHA1

88a89b3548e928ce8f347d0be60b96afae706d82
SHA256

6280d97cc6677b29d2f05f8c4a6dc8aa9dd412f175b1dcc3e94d2b1b76af8aac
SHA512

f323d97cb08e668f758c8e0572bfe580f52dd65b1510f119d9751f3a9c63ae86f5000b5877ff034e4a5b66b48ae9a63df1e515d579ce82eb90fbce9225a64b61
SSDEEP

12288:ZK5IaLC2VP+Xzz5W+9OPptGStxOrlx8je6/AR4vUifniN2fbklD8aliU:ZmIaWUOzp/Stcz8jMRyUififloal3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc09d90e0871dda6f848527f88ff441e

Files

cc09d90e0871dda6f848527f88ff441e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\dods\Local Settings\Application Data\Temporary Projects\PSF - WALLHACK\obj\Debug\PSF - WALLHACK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ