ecc4cdd0a8f6850399125e3be9b9b4261cc988f753ed8251ed918209c126606d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecc4cdd0a8f6850399125e3be9b9b4261cc988f753ed8251ed918209c126606d
Size

120KB
MD5

c00f7b7fb879d0e49e0adb8d13e20015
SHA1

66e505c7b788fa484df5616bc95bcba81e4ac65a
SHA256

ecc4cdd0a8f6850399125e3be9b9b4261cc988f753ed8251ed918209c126606d
SHA512

cf1f1a40e4cd8eb48b8ecec4c771ae2edb3f551efba973005138c2204ea74c77b2d3a51351ed7c08bf7e672c6acb7df0c17baf7e3bb3dde2f69addc3b9ffaebf
SSDEEP

1536:0GJ+W58WhJSUIvdedmlUtMWeNm27vwqFgXa07gbvFtlM7S0oz0Lk2VC017TR:x4o8bedUUtMPDzvGdMbttlMQwp1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecc4cdd0a8f6850399125e3be9b9b4261cc988f753ed8251ed918209c126606d

Files

ecc4cdd0a8f6850399125e3be9b9b4261cc988f753ed8251ed918209c126606d
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ