cca89607d813940f9a62087578519717678eb24029009be0bf9ddbf93358d052 | Triage

Sharing

General

Target

cca89607d813940f9a62087578519717678eb24029009be0bf9ddbf93358d052
Size

56KB
MD5

23c1f83f6a4afd2ad92a1f1f37dc4d16
SHA1

abd3f678b322b5076349aa28c48d84b91b8e7b99
SHA256

cca89607d813940f9a62087578519717678eb24029009be0bf9ddbf93358d052
SHA512

7f17bd5f1a147ad5637a8673228099c7c028ca5f99096dedbe3e6cc3f5e2197a0b40402f04b20f2abdd1a40720dd6596b5d0969fdab66dfae157dd9d8f610a8b
SSDEEP

1536:2Z2EaW2QshCXCWyPbjsA2C1ULkutiNahG4S6LbG:QJaW32CXagqutiNas4nH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cca89607d813940f9a62087578519717678eb24029009be0bf9ddbf93358d052

Files

cca89607d813940f9a62087578519717678eb24029009be0bf9ddbf93358d052
.dll windows:5 windows x86 arch:x86

6dfbc160505aa2f7205766eaa6fe72a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CreateWindowExA

Exports

Exports

ServiceMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ