0ccc63b7d6dd5bb0acfd3ea0ef6ecc8e

Sharing

Copy URL Twitter E-mail

General

Target

0ccc63b7d6dd5bb0acfd3ea0ef6ecc8e
Size

297KB
MD5

0ccc63b7d6dd5bb0acfd3ea0ef6ecc8e
SHA1

af2906a475f42ac818e03a7b22d6ad89e0705814
SHA256

c250ba5348b006913576b751e485b6993600c43ed877242fff32c6b1426f9878
SHA512

bc5307209c7fbac3a49ed349ddf72662d2937956f5067c535b7848c9b7ce99c6232c016e0973e80b15ee73f54d26bad310c8e915a60a364fdebe9dbec4feb870
SSDEEP

6144:jBR3uaOXPrBw84O1LrIetYVsRsymbztfQ/zH4/i7rBnnU/bKYChKV0jDmu9zQHZF:1R3LOXPlw8n1Ljt3mbzGzH4/IrBnnEbd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ccc63b7d6dd5bb0acfd3ea0ef6ecc8e

Files

0ccc63b7d6dd5bb0acfd3ea0ef6ecc8e
.exe windows:4 windows x86 arch:x86

22b9ba9abe48692d2311ca4fb2953bb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
FreeEnvironmentStringsW
DeleteCriticalSection
RtlUnwind
VirtualFree
DeleteFileA
GetCurrentProcess
SetHandleCount
VirtualAlloc
GetCommandLineW
HeapCreate
HeapReAlloc
InitializeCriticalSection
TlsGetValue
HeapDestroy
GetFileType
InterlockedExchange
GetModuleFileNameA
GetModuleFileNameW
TlsSetValue
ExitProcess
GetStdHandle
TlsFree
ReadFile
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
SetLastError
GetEnvironmentStringsW
EnumResourceTypesW
QueryPerformanceCounter
EnumResourceTypesA
MultiByteToWideChar
UnlockFile
VirtualQuery
GetCurrentThreadId
GetEnvironmentStrings
HeapAlloc
LeaveCriticalSection
HeapFree
RtlFillMemory
TerminateProcess
GetCurrentProcessId
GetAtomNameA
WriteFile
TlsAlloc
lstrcpyW
SetThreadAffinityMask
GetCurrentThread
GetVersion
EnterCriticalSection
GetLastError
GetProcAddress
IsBadWritePtr
GetProfileIntW
FreeEnvironmentStringsA
GetModuleHandleA
UnhandledExceptionFilter
GetStartupInfoW

wininet

InternetGoOnlineA
GopherFindFirstFileA
InternetSetOptionA
HttpSendRequestExW
InternetTimeFromSystemTimeA
InternetTimeToSystemTimeA
FtpPutFileEx
InternetReadFileExW
FtpPutFileA
InternetDialA
InternetSetDialState
GetUrlCacheConfigInfoA
FtpCreateDirectoryW
HttpOpenRequestW
InternetWriteFileExA
InternetGetCookieA
GopherGetLocatorTypeW
UpdateUrlCacheContentPath
InternetOpenUrlW
FindNextUrlCacheContainerA
InternetCombineUrlA
FtpDeleteFileW
FtpDeleteFileA
SetUrlCacheEntryGroupA

gdi32

CombineRgn
SetColorAdjustment
PolyDraw
SetPaletteEntries
SetMetaFileBitsEx
StretchBlt
GdiFlush
GetCharacterPlacementW
CreateMetaFileA
CreateDIBSection
GetEnhMetaFileDescriptionA
SetROP2
SelectObject
ResizePalette
GetCharWidth32W

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22b9ba9abe48692d2311ca4fb2953bb2

Headers

File Characteristics

Imports

kernel32

wininet

gdi32

Sections

.text Size: 156KB - Virtual size: 155KB

.data Size: 133KB - Virtual size: 132KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 156KB - Virtual size: 155KB

.data
Size: 133KB - Virtual size: 132KB

.rsrc
Size: 7KB - Virtual size: 6KB