cc9ebf9ebb0229678febd66da6a59977 | Triage

Sharing

General

Target

cc9ebf9ebb0229678febd66da6a59977
Size

310KB
MD5

cc9ebf9ebb0229678febd66da6a59977
SHA1

d93a7af10ba13260343b3fcd7e04182f41a860df
SHA256

f871de2935e44d8b3d61d0c1f7290e6332c092d819cdfbb2c993889bc28334ae
SHA512

87b3116a9b1e7ae24efb6b58970ceea301809895fce00ea02a1af4dc3f4f96bd4143e76ee0721239dd081b50dca1f52cf67905ab5423e41dbdb51e3445a39c5d
SSDEEP

6144:5DLWiTxaE1PgaCR78f4SGYSLy6ExnNSD2B9y/jsc6C27m0m2RtYiqprj2McG8:1Jxa+Yk4/Vgy2BA/RyNm2RtYiqdjFR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc9ebf9ebb0229678febd66da6a59977

Files

cc9ebf9ebb0229678febd66da6a59977
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.aizhi0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aizhi1
Size: 302KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aizhi2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ