cc[.]exe | Triage™

General

Target
cc.exe
Size 299KB
Sample230413-rx1t7aca78
SHA256 3b9d0e62c06caeaf4244ff2fb275a1919fd9e14243fb436dce313c8d9b89faa4
MD5 d8ce4c1f7b3318f4f3c151629b2e5739
SHA1 938cceb0e6e866f671e5a7ab8e3d1fdc85e6c8aa
SHA512 f3da1bbd373b8e78ec960ccd9d3dd625d7927934d42bc3d520eeaabcbc42f13418b9a5ec8d2169cb5a5599119b50a5e9543a296fb7c094c97bf00b83b7ff5c7f
SSDEEP 3072:0050bfRBQqZD6rphZOZeJLXlWKxy00VkD9ZNiADE9uJCAFz+anPr3qnB57zJ0n:KIqM7AaVWAy00VgHS9O5Fz+anj6n/z
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

cc.exe

.exe 299KB

cc.exe

IMPHASH 0f48d92fafc69d5074b5763e3a2f3ad9
SHA256 3b9d0e62c06caeaf4244ff2fb275a1919fd9e14243fb436dce313c8d9b89faa4
MD5 d8ce4c1f7b3318f4f3c151629b2e5739
SHA1 938cceb0e6e866f671e5a7ab8e3d1fdc85e6c8aa
SHA512 f3da1bbd373b8e78ec960ccd9d3dd625d7927934d42bc3d520eeaabcbc42f13418b9a5ec8d2169cb5a5599119b50a5e9543a296fb7c094c97bf00b83b7ff5c7f
SSDEEP 3072:0050bfRBQqZD6rphZOZeJLXlWKxy00VkD9ZNiADE9uJCAFz+anPr3qnB57zJ0n:KIqM7AaVWAy00VgHS9O5Fz+anj6n/z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19177

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BackupSeek GetModuleHandleW VirtualFree ConvertFiberToThread ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW EnumResourceTypesA SetHandleCount LoadLibraryW SetCommConfig GetFileAttributesA GetConsoleFontSize GetShortPathNameA EnumSystemLocalesA GetCPInfoExW GetLastError GetProcAddress AttachConsole InterlockedCompareExchange WriteProfileSectionA GetFirmwareEnvironmentVariableW LoadLibraryA LocalAlloc SetConsoleDisplayMode OpenEventA RemoveDirectoryW BeginUpdateResourceA PostQueuedCompletionStatus HeapWalk FoldStringW EnumDateFormatsA GetModuleHandleA ScrollConsoleScreenBufferA GetWindowsDirectoryW AddConsoleAliasA DebugBreak EnumCalendarInfoExA QueryPerformanceCounter InterlockedDecrement VirtualAlloc FindFirstChangeNotificationW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

gdi32

GetCharWidthA GetCharWidthI

advapi32

ClearEventLogA

Sharing