ff4cce00b4c8bf4e4d3befe3fa535f5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff4cce00b4c8bf4e4d3befe3fa535f5f
Size

815KB
MD5

ff4cce00b4c8bf4e4d3befe3fa535f5f
SHA1

5b1433a173e241daae834eb503d083e1d83b61ca
SHA256

47d033a3379793cc2250023f0cc6aec78ca8ec4bbe7c12649a141c8221e05aca
SHA512

449aa501a6bf10d29277c1bbacc19f93c36bb0dbf7b2b96c28c6411d1852e1cce5bce68bec791a1a91e319fe3030a5f513946abe04a36a9592e19100b57621de
SSDEEP

24576:jHnM9Gxn5lf/n0HQIhaGYNt0TK2uIo2maA:jHK65lfP07haGYNuTKH5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff4cce00b4c8bf4e4d3befe3fa535f5f

Files

ff4cce00b4c8bf4e4d3befe3fa535f5f
.exe windows:4 windows x86 arch:x86

581affd1cdd3b44a3bcbbca9bbdb98cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LoadLibraryExW
CreateFileA
GlobalUnlock
GetModuleHandleA
FreeEnvironmentStringsA
MapViewOfFile
GetACP
HeapCreate
lstrlenA
CreateMutexA
TlsGetValue
HeapDestroy
SetupComm
ExitProcess
LocalFree
FindAtomA
FindClose
SetLastError
UnmapViewOfFile

user32

CallWindowProcA
GetDlgItem
GetFocus
CopyRect
DrawEdge
DrawMenuBar
FillRect
GetDC
IsWindow
DispatchMessageA
CheckRadioButton
DefWindowProcW
GetIconInfo
MessageBoxA

uxtheme

DrawThemeText
GetThemeRect
DrawThemeEdge
DrawThemeIcon
GetThemeSysInt

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ