ccb94b7fc922c152fbf27fd449dff135 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccb94b7fc922c152fbf27fd449dff135
Size

44KB
MD5

ccb94b7fc922c152fbf27fd449dff135
SHA1

41b30b4401280850b48e930cb8a2d9a6e138546c
SHA256

267fc283d5b3f6f44fa37e9d978a75491ade9906ffc7b3bb71396631cf0ea460
SHA512

659643b8bd235e7e4671ea1f6760c7acc141a397c1bfc400b7ea437e7f087a05b04dbcaf65004bf20a1cbf2b26fc0c0922ee7330bd3f819b3054e5b7b4274e74
SSDEEP

768:6Lne7N1wQdHQS9K02xJ6T0nAt5XZn8br07QBw3G:6LkNBlY0GJ6oIX18E6w2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccb94b7fc922c152fbf27fd449dff135

Files

ccb94b7fc922c152fbf27fd449dff135
.dll windows:4 windows x86 arch:x86

cabb76ad09239e7ab9247e2fdfbf1993

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

strcpy
_wcsnicmp
_strlwr
strcmp
RtlImageDirectoryEntryToData
RtlImageNtHeader
memcpy
strstr
sprintf
strncpy
memset
strcat
strlen
_strnicmp
wcsstr
_wcslwr
_chkstk

kernel32

LoadLibraryA
GetVersionExA
OutputDebugStringA
HeapFree
HeapReAlloc
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
ExitThread
VirtualProtect
GetModuleHandleA
GetCommandLineA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ