cc28c3ac0e2f93e728b60552f36a4ff3f5bdd4bbcf0d94f0ad7b7af33ce6b88f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc28c3ac0e2f93e728b60552f36a4ff3f5bdd4bbcf0d94f0ad7b7af33ce6b88f
Size

8KB
MD5

a3a1791df54eef4bf57664bf58c727f7
SHA1

a884a4734ac4f8967289c41ab558e488cae42917
SHA256

cc28c3ac0e2f93e728b60552f36a4ff3f5bdd4bbcf0d94f0ad7b7af33ce6b88f
SHA512

6aef61b854cb6d077845d8cb1f92e7ec63e993cab0f30d0f3e4e96228ec39bd8581602cdc0fce6d2483c62ebf4d8464ff841453c688c73242d6b2665e8958938
SSDEEP

192:2LHBKpbUD5jKXvR8hN68i3xobemTm+PTv98SgVXtTjk:2sbUFKXy28YxohRTvyFl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc28c3ac0e2f93e728b60552f36a4ff3f5bdd4bbcf0d94f0ad7b7af33ce6b88f

Files

cc28c3ac0e2f93e728b60552f36a4ff3f5bdd4bbcf0d94f0ad7b7af33ce6b88f
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ