ccecccd2e5d345a247832b9cdee08ca4da70dbf84460141d7bc79d4da6ed9a6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccecccd2e5d345a247832b9cdee08ca4da70dbf84460141d7bc79d4da6ed9a6d
Size

299KB
MD5

7bb534321c46b6436d7b3dd71232be40
SHA1

9fb3877dbdccc2d7c04358be65870e2659ba5c27
SHA256

ccecccd2e5d345a247832b9cdee08ca4da70dbf84460141d7bc79d4da6ed9a6d
SHA512

39203e5a545647407f92f9363aa742d3579be4cc62ab9e1a1ca4c0622e587075c1d103a128b78a2b059396e0f92755895c106747a481ba98117ac68f4f39a0db
SSDEEP

6144:mGZhKuRNMpCpFxOQKM5cGcDlsKmLcMqeB6hd6dA4:LNMc5KEcGcDl/mAnwA6dA

Score

N/A

Malware Config

Signatures

Files

ccecccd2e5d345a247832b9cdee08ca4da70dbf84460141d7bc79d4da6ed9a6d
.exe windows x86

070e2063101a0e651e68f69add8f3f5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
IsValidLocale
GetProcessHeap
lstrlenA
GetVolumePathNameA
WaitForSingleObject
GetModuleHandleA
GetLogicalDriveStringsA
CreateMailslotA
FileTimeToLocalFileTime
GetDriveTypeW
DeleteFileA
HeapCreate
CreateNamedPipeA
lstrcmpiA
SetLastError
lstrcmpiA
lstrcmpiA
SuspendThread
GetStdHandle
GetModuleFileNameA
lstrcmpiA
lstrcmpiA

riched20

CreateTextServices
IID_IRichEditOle
IID_ITextHost
RichEditANSIWndProc

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sql
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ