c2cc1aa1e95852932903da81f14f04671b0314d15f9bd237af56d836b53ec75a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2cc1aa1e95852932903da81f14f04671b0314d15f9bd237af56d836b53ec75a
Size

1.2MB
MD5

3d35c0b90392092ca87c43638d82269b
SHA1

151c8b4f4e6a94a04ac29f12cf68af17494e3014
SHA256

c2cc1aa1e95852932903da81f14f04671b0314d15f9bd237af56d836b53ec75a
SHA512

a77a1aaa92c492ffff99c380232f0b824db831afb8866862266d38f650ffa0d35e478e4482d2c711a5c8d531a5c39776f23aaa1e9dbd238ed86320cbbc392c2d
SSDEEP

24576:LZpBcYXNDdOc110kRJoIQb0ppC0mgfHYlBSm7I8Quxx9vX/pBlnUI5hBm:LlvXNxOc110kAb0Egf4lB4bufFHZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2cc1aa1e95852932903da81f14f04671b0314d15f9bd237af56d836b53ec75a

Files

c2cc1aa1e95852932903da81f14f04671b0314d15f9bd237af56d836b53ec75a
.exe windows x86

6ec3e0af9bd2249613fe42285c9d599b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetWindowsHookExA

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

winspool.drv

EnumPrintersA

advapi32

RegSetValueA

shell32

ShellExecuteExA

comctl32

ImageList_AddMasked

oledlg

ord8

ole32

CoTaskMemAlloc

olepro32

ord253

oleaut32

SysAllocStringLen

odbc32

ord10

wsock32

closesocket

wininet

InternetGetLastResponseInfoA

imm32

ImmAssociateContext

Sections

.text
Size: 1.2MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE