11cc0f2f7331be2550fc936b82c3ec52

General

Target

11cc0f2f7331be2550fc936b82c3ec52
Size

77KB
MD5

11cc0f2f7331be2550fc936b82c3ec52
SHA1

55abb9b84de07c4733167579280af8532818f363
SHA256

608a0e6548285fca5c4bfa2faac753d50167b6d71a0b7637165d52b9cca56a5b
SHA512

cc8b1cc63ac4b540331927d914ef8233ddfac02e6e4b4dd75feef3bdbd26209d666570614fbf942d90c5bb508997a4dd060cea125a74b0ed3c0f6c1cd98465e0
SSDEEP

1536:qgCruDO/Rfjw1KUE6KAJFeOm0zZx6WswnDCvIt:YqDO/5jwyGJEOm66WswnMIt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11cc0f2f7331be2550fc936b82c3ec52

Files

11cc0f2f7331be2550fc936b82c3ec52
.exe windows:4 windows x86 arch:x86

62a1a5663ee28b67bb9cccecdd021f18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcschr
time
memcpy
atol
exit
memmove
swprintf
clock
calloc
rand

user32

GetMenu
TranslateMessage
LoadBitmapA
TrackPopupMenu
TranslateMDISysAccel
KillTimer

comctl32

ImageList_Write
ImageList_Create
ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Destroy
ImageList_GetBkColor
ImageList_DragShowNolock

kernel32

ExitProcess
GetCurrentThreadId
GetStartupInfoA
VirtualAllocEx
lstrcpynA
GetDateFormatA
ReadFile
SetLastError
LoadLibraryA
GetTickCount
FreeResource
WideCharToMultiByte
CompareStringA
lstrlenA
LocalAlloc
GetStdHandle
GetCommandLineW
GetCPInfo
ExitThread
GetStringTypeA
LockResource
GetThreadLocale
SetEvent
GetProcAddress

Exports

Exports

_ZHfzzU5GKi@16

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lkdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 512B - Virtual size: 473B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62a1a5663ee28b67bb9cccecdd021f18

Headers

File Characteristics

Imports

msvcrt

user32

comctl32

kernel32

Exports

Exports

Sections

CODE Size: 14KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 21KB

.lkdata Size: 48KB - Virtual size: 48KB

.idata Size: 1KB - Virtual size: 1KB

.jdata Size: 512B - Virtual size: 473B

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 14KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 21KB

.lkdata
Size: 48KB - Virtual size: 48KB

.idata
Size: 1KB - Virtual size: 1KB

.jdata
Size: 512B - Virtual size: 473B

.rsrc
Size: 1KB - Virtual size: 1KB