d4ccf86e25f277ba9173f29e13a112c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4ccf86e25f277ba9173f29e13a112c0
Size

178KB
MD5

d4ccf86e25f277ba9173f29e13a112c0
SHA1

17eca89cee9a39d8b3da204052d6a045758cba04
SHA256

c2047b05505488f8e46a4c656eb8523772723bc3be2e4454626e180b3e6cd88f
SHA512

708e41dea1e408896fd6099541ce3f54c685e2c5e32570262c5b5796b6c223c0b4c3fd4f19188d9c2ba4bae2b9a608290a9b8038ce3802bd04759766384a090d
SSDEEP

3072:KbcF5VtWlMz9Q8EyVuw1SsLSA+3ftOTzoeFrA7zLts2LRyyBoympSAB/jlZ00j4r:KeznGdyVv+vtSlKzLFBoynAB7lZ00j4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4ccf86e25f277ba9173f29e13a112c0

Files

d4ccf86e25f277ba9173f29e13a112c0
.exe windows:4 windows x86 arch:x86

6a6cce5248fea4fd5b2850ee772e8a95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SafeArrayPtrOfIndex

version

VerQueryValueA

user32

CreateWindowExA

ole32

CreateStreamOnHGlobal

advapi32

StartServiceA

comctl32

ImageList_SetIconSize

gdi32

UnrealizeObject

Sections

CODE
Size: 170KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE