cc6019a2703279e85864a0ccdf4e6ebb | Triage

Sharing

General

Target

cc6019a2703279e85864a0ccdf4e6ebb
Size

120KB
MD5

cc6019a2703279e85864a0ccdf4e6ebb
SHA1

228e925795424bb4013bfe033920a6d1e1189e32
SHA256

a2ae5db6b18c7fbb839785d82ea4cb799eb6765f90807c73166b5a07036ee4c6
SHA512

fe85f918efd6c4b793b1217b08051174ae211bbfc81dc903ba9a31b4e5baab7c6c39d87d9ea26f63b85149d70e5ece953310a188bc88da1df8fe503d8270877d
SSDEEP

3072:OTJj4Mq1CKTIpzZ7lbKgCjZ1jM9FrDCotfFrTVex:OyPCuIxZZbKVjrj0FrD3tdvV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc6019a2703279e85864a0ccdf4e6ebb

Files

cc6019a2703279e85864a0ccdf4e6ebb
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ