cc383d2a7d10f080d7329f2ce4fc0a7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc383d2a7d10f080d7329f2ce4fc0a7b
Size

52KB
MD5

cc383d2a7d10f080d7329f2ce4fc0a7b
SHA1

5d3982865d0c1928ca0d5c19f57318cde28efa50
SHA256

6e18a890f61a563b82743c4e4e67bb7db0d5b22082e0e4b47ed8c9b5dcceba2e
SHA512

b030e1edf73b9f638295f4780b7609469f3b268996bfe42fe7787c5effcb5883d1485b0fb733ce7793a2caa9d5f03b39773551b305976807c74e60e500c268b6
SSDEEP

1536:QNoJe5Zs4EwmmbeyVA3plMt0/AvuGmLsypi:QNoJ2ZswreyV0plMyY8YyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc383d2a7d10f080d7329f2ce4fc0a7b

Files

cc383d2a7d10f080d7329f2ce4fc0a7b
.dll windows:4 windows x86 arch:x86

ca7e022a3aa7aabc581ccfbb37ec2e66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GetCommandLineA
GlobalFree
VirtualProtect
SetLastError
InterlockedDecrement
FreeLibrary
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
InterlockedCompareExchange
Sleep
GetModuleFileNameW

user32

LoadStringW

msvcr71

_amsg_exit
__CppXcptFilter
_except_handler3
_unlock
__dllonexit
_onexit
memset
_adjust_fdiv
_XcptFilter
_callnewh
malloc
_CxxThrowException
free
_initterm

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ