ccf5788fbbd6878eae4fc947dff6e986 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccf5788fbbd6878eae4fc947dff6e986
Size

19KB
MD5

ccf5788fbbd6878eae4fc947dff6e986
SHA1

49fc01d82c3765e317d880e74d9e868f7ccc9876
SHA256

4348f3dcf99eaeb4cb1613034ac58647d460c4f5ea3647c642f13e40c8a55679
SHA512

4066a5e9919c5a564f71857712e8326f4e85b71a8b9d558456add4aff0d96499404dcc00815deeafb8544548206984aa9ce25e2e2b36ff650be47e55100c8633
SSDEEP

384:Mrayr9bCjNAsNxksPW2zBKsft1VppfiToBI8m+Sth6A:Qtr9bohksPW2zYwiTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccf5788fbbd6878eae4fc947dff6e986

Files

ccf5788fbbd6878eae4fc947dff6e986
.exe windows:4 windows x86 arch:x86

2c35ed123bf7fb5532653325910c7a41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree

Sections

.text
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llydd
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE