cc8dbd4bf653019d7aa3786721e725f0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc8dbd4bf653019d7aa3786721e725f0N
Size

5.1MB
MD5

cc8dbd4bf653019d7aa3786721e725f0
SHA1

ada069d0df9425d39e6b94b5ac36def37617b31e
SHA256

9919f39ab9c5bf7468beaf76f088e249675c884043259812f3b38c7f597dff81
SHA512

eedc2c1b89769e165c09443f4a3f9d40133c49a73d4e2ca48d72b06f22d93902f8aae1fedfc5bc00d5318ccc429f5ead5602ae390aa05c2043d94db30090139b
SSDEEP

98304:mM8nxuYKnBX9uQFJVI3uLsgbeFFuzI8NbnlHyq/r9mG5d9O3:mMyuxBX5JKeYgbYAzI8hlHyq/r+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc8dbd4bf653019d7aa3786721e725f0N

Files

cc8dbd4bf653019d7aa3786721e725f0N
.exe windows:5 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jgebwgyr
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ouzliopm
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE