cc79c4c85971fc347948b3fd804e9490N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc79c4c85971fc347948b3fd804e9490N.exe
Size

371KB
MD5

cc79c4c85971fc347948b3fd804e9490
SHA1

bdde7c7765ebb2c3075a86d1cbc508af49d2628f
SHA256

41c2230fc38167cb9e83f127e6290eae4a2033cd672bf672f70f96f16f3f91ca
SHA512

260142ca42f79e46513d88ed901a828e1f046ddff7627e180d98e30563396a721cb8100ec0ec54568057fe08f4cdd5467ac436d3baf2dfb2c1a3e10535cf4749
SSDEEP

6144:A6u7TXyEu9fQs0JImv/0jgLD4Yhh6CZjp+WV86Dz2HIjC4cqc:cTXyV9f9mv/xLthh6It8OCIjiqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc79c4c85971fc347948b3fd804e9490N.exe

Files

cc79c4c85971fc347948b3fd804e9490N.exe
.dll windows:4 windows x86 arch:x86

2205f073b634c1497f1fc3e78c7e99fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
GetTempPathW

msvcrt

memcpy
memcmp
memset

Exports

Exports

uumvox

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 629B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ