cc5061c0b175fc0fb4a5ec7b547d9c70N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc5061c0b175fc0fb4a5ec7b547d9c70N.exe
Size

801KB
MD5

cc5061c0b175fc0fb4a5ec7b547d9c70
SHA1

056e8c944a5366392ba79f2ecc5ca3b059355e5d
SHA256

2e3a977c3ea5241292e46b9d825cd23f105cc5a0acb2435ad5d3fefc7bb69a2d
SHA512

a03ca8478c6c2cd0e83e4cb6d45838fd7a07166f4d144e34c0ce40f385bd1c849053fe38988309d85532898fab1c5d2214bc52f957f3199451210e667803685f
SSDEEP

12288:zQO75irR0nxkYMqSul4uxLN/yh3QEryqQcdg0F4iH9k7gTUV9QwUz:UUsAxkYMZW4ASnrQqg0Fb9k7d5Uz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc5061c0b175fc0fb4a5ec7b547d9c70N.exe

Files

cc5061c0b175fc0fb4a5ec7b547d9c70N.exe
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ChangeMe
DllRegisterServer
RegisLongers

Sections

CODE
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ