0ccf000b0a3136d5492d16de46c6a4b5

Sharing

Copy URL Twitter E-mail

General

Target

0ccf000b0a3136d5492d16de46c6a4b5
Size

107KB
MD5

0ccf000b0a3136d5492d16de46c6a4b5
SHA1

d400f7d8882519dfa6b7bf1bb32e2d834ef1f772
SHA256

3f8f4297912dc05f3592975d3af7419f83d4ba13596e6a82ebe0f5d9ae0b33cf
SHA512

91b89ad8d386f68c36dc12288445035d8773bf8756125377463c2a19fd0317ec2d704e19db22408bb4ae61a69e890e70fe56a1a06aa41570236c660db19cbe61
SSDEEP

1536:yuAqZ+B1iHV5CeOQhEcYr0p88Ccky5S3hdwFl53GZJd8BHDAhyvb/O:yKZ8MDREpskmCKFHXHDAg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ccf000b0a3136d5492d16de46c6a4b5

Files

0ccf000b0a3136d5492d16de46c6a4b5
.exe windows:4 windows x86 arch:x86

774e9acfc595bf3f12eeff7188a29ce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCommandLineA
SetLastError
WriteFile
DeleteFileA
GetComputerNameA
OpenFile
DeleteFileW
ReadConsoleA
CopyFileW
GetFileTime

advapi32

RegReplaceKeyA
RegQueryValueW
RegLoadKeyA
RegQueryValueA
RegLoadKeyW
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyW
RegEnumKeyExW
RegFlushKey
RegCreateKeyExA
RegOpenKeyW
RegDeleteKeyA
RegDeleteValueW
RegCreateKeyW
RegOpenKeyExA
RegLoadKeyW
RegReplaceKeyA
RegEnumKeyW
RegQueryValueExW
RegGetKeySecurity
RegEnumKeyA
RegEnumKeyExW

comctl32

ImageList_GetImageInfo
ImageList_Destroy
ImageList_Draw
ImageList_EndDrag
ImageList_GetIcon
ImageList_GetImageRect
ImageList_DragEnter
ImageList_LoadImage
ImageList_Create
ImageList_DrawIndirect
ImageList_AddIcon
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_DrawEx
InitCommonControls
ImageList_Merge
ImageList_GetImageCount
ImageList_AddMasked
ImageList_DragLeave
ImageList_ReplaceIcon

user32

InsertMenuA
IsWindow
GetDC
GetCursor
AppendMenuA
LoadCursorA
GetMenu
AppendMenuW
DialogBoxParamA
DrawIconEx
CopyIcon
AppendMenuA
DrawTextW
DialogBoxParamW
GetCursor
GetWindowTextLengthA
DrawIcon
EndDialog
BlockInput
CreateIcon
GetMenu

gdi32

DeleteObject
CloseFigure
DeleteDC
ExtTextOutA
AddFontResourceA
CopyMetaFileA
AddFontMemResourceEx
CreateSolidBrush
RestoreDC
ClearBrushAttributes
AddFontResourceExA
BitBlt
ExcludeClipRect
AddFontResourceW
CloseMetaFile
AbortPath
GetBitmapBits
GetCurrentPositionEx
CancelDC
ClearBitmapAttributes
GetBrushOrgEx
GetPixel

shell32

CheckEscapesW
SHDoDragDrop
SHChangeNotifyRegister
SHDefExtractIconW
ExtractIconEx
SHUpdateImageA
SHUpdateImageW
ExtractIconExA
ExtractIconA
DllGetVersion
DragQueryFile
DragAcceptFiles
SHChangeNotifyDeregister
PathGetShortPath
SHDefExtractIconA
DragQueryFileA
RestartDialog
DragQueryPoint
DragQueryFileAorW
SHFindFiles
CommandLineToArgvW
FreeIconList

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 59KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 165B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

774e9acfc595bf3f12eeff7188a29ce8

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

gdi32

shell32

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 73KB - Virtual size: 72KB

.bbs Size: - Virtual size: 59KB

.idata Size: 5KB - Virtual size: 4KB

.tls Size: - Virtual size: 165B

.rdata Size: 512B - Virtual size: 856B

.rsrc Size: 1024B - Virtual size: 516B

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 73KB - Virtual size: 72KB

.bbs
Size: - Virtual size: 59KB

.idata
Size: 5KB - Virtual size: 4KB

.tls
Size: - Virtual size: 165B

.rdata
Size: 512B - Virtual size: 856B

.rsrc
Size: 1024B - Virtual size: 516B