ccffe6675a3470258703eaa434afb548 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccffe6675a3470258703eaa434afb548
Size

323KB
MD5

ccffe6675a3470258703eaa434afb548
SHA1

fa160465b0c63ba6aac0d26717c21098bf78b3e2
SHA256

18d557d618ece99cee40c93f0f332b4298e8ca0e29277e4e35ed91c9a80ec386
SHA512

b1a0901a4635a50345d27da73115f411c5bbe2ec0317706903559e98a80e7760a9fbf48f8970fc9db7674d78932f666f6f37c9e769ac8a9c8488eb77d0eb4725
SSDEEP

6144:rkDvVgFfEzjyB10NIg/6dvUjAtH53Lel4nHBMhCNgbnykg0VvfL10C:AzVWESB1aCddHJq2hAfZL10C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccffe6675a3470258703eaa434afb548

Files

ccffe6675a3470258703eaa434afb548
.exe windows:4 windows x86 arch:x86

6fe964f82fd57f5fe5af99187f72146e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE