cccddb6784d22adb54701cf859c453d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cccddb6784d22adb54701cf859c453d5
Size

498KB
MD5

cccddb6784d22adb54701cf859c453d5
SHA1

a6f9d36b4a8098a2f029e88ee8b65a77393c333b
SHA256

e97a4b9d4ebdca3465a2850d511a32b45790b846d3f2cd8c280ba137b070b4ae
SHA512

ea9d20b82042ec18cbd897473f89d6f6f0dabe71406bb6983b9d07007173de1fad806b123fb39ae5177e977d8479a7ed2e86718be9649016e184edd53148a654
SSDEEP

6144:X0GnN7od6s0EAGUCoPMSZYql0jhTFi5VT21IwW8ynHviAmN:EGnN7A6TPMS1lKo2qj80PiAg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cccddb6784d22adb54701cf859c453d5

Files

cccddb6784d22adb54701cf859c453d5
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ