cc037a0db243b4aaa7b7eba2314d56ca65163d8d91f8423592dcf966ea45570c

Sharing

Copy URL Twitter E-mail

General

Target

cc037a0db243b4aaa7b7eba2314d56ca65163d8d91f8423592dcf966ea45570c
Size

602KB
MD5

675c38398e2f68a014916781aeb99f5b
SHA1

ddb42caca6e49f5257c5e8b4425e4b8836ba5977
SHA256

cc037a0db243b4aaa7b7eba2314d56ca65163d8d91f8423592dcf966ea45570c
SHA512

3544a417eadc489869b206e6e965c35008e4f349e7f83eb988525f6f7550ca419cce9f6f0cf9dad42b4ea256a73400ba58ed90dfa4a6750d514f8c4660b4b238
SSDEEP

12288:A9vS6ZY657X7YJQ+FujipevCoKd5RyOg31j2E8Hwjb+dn7ZPgYzlbhDu7TUzclwU:r6ZY657X7YJQ+cCq31jH8HwWjgwlbhP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc037a0db243b4aaa7b7eba2314d56ca65163d8d91f8423592dcf966ea45570c

Files

cc037a0db243b4aaa7b7eba2314d56ca65163d8d91f8423592dcf966ea45570c
.exe windows:6 windows x86

8a9b9c874fd6a5a4693797ec47b062f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
LoadLibraryW
GetProcAddress
SleepEx
SetEndOfFile
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LocalFree
GetLocaleInfoEx
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
CompareStringEx
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetFileSizeEx
SetFilePointerEx
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapFree
CloseHandle
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
GetCurrentThread
SetConsoleCtrlHandler
HeapReAlloc
GetTimeZoneInformation
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
CreateFileW
HeapSize
WriteConsoleW
VirtualQuery

Sections

.text
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a9b9c874fd6a5a4693797ec47b062f2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 504KB - Virtual size: 504KB

.rdata Size: 71KB - Virtual size: 71KB

.data Size: 7KB - Virtual size: 12KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 504KB - Virtual size: 504KB

.rdata
Size: 71KB - Virtual size: 71KB

.data
Size: 7KB - Virtual size: 12KB

.reloc
Size: 18KB - Virtual size: 18KB