0cc3e77a0fd3a588af32b0f6c90e7650113d9a7d5c7ef9674ea2ca4abccd677cN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cc3e77a0fd3a588af32b0f6c90e7650113d9a7d5c7ef9674ea2ca4abccd677cN
Size

120KB
MD5

c21a9b15c22d7a1a189215f9836c7770
SHA1

8a0eb514048d580c8799e3dea7385b0fdf2efc57
SHA256

0cc3e77a0fd3a588af32b0f6c90e7650113d9a7d5c7ef9674ea2ca4abccd677c
SHA512

5756663556a12c0ada19573721613639268a09510d5a6503da222929e9168bbc712ca56e526fe5c1bc7db1ab5fa8dcd75a637a3ae8dfab4d2d828ebdfbaae6a1
SSDEEP

1536:hUM5knDf5eNKdLVcTfASRO0hyZn7vNmJFRAnawavr+lB9IcHlFtQDaMHyH0chwhb:hLYfUNJRO0un7qAyiHHl9MHCWuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cc3e77a0fd3a588af32b0f6c90e7650113d9a7d5c7ef9674ea2ca4abccd677cN

Files

0cc3e77a0fd3a588af32b0f6c90e7650113d9a7d5c7ef9674ea2ca4abccd677cN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ