1cc10423a151641a7ab159a27875a116 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cc10423a151641a7ab159a27875a116
Size

67KB
MD5

1cc10423a151641a7ab159a27875a116
SHA1

4a842f67984b28b0721ed33ec69b1867d2a108a2
SHA256

9f7fddb14bfff9dcef56b462736e0192253da6372a4e2551e0d25d95d1b768e6
SHA512

9e4709951fed0013e4269188dd1962e18f0b7f2ae37b460562010256c5b906e8f221f7469edf6cdcb39860016147cb9c1b7283f96cfc3a81ebdaa90b57818d61
SSDEEP

1536:dZjWyIEI/0U1mxyLxFQDlZCSkcLHDgOYZKfLz:dZ5Izlmox4ZCSlL0Mz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cc10423a151641a7ab159a27875a116

Files

1cc10423a151641a7ab159a27875a116
.exe windows:4 windows x86 arch:x86

77eb0c164090eeb15303c2f6d8bf8bef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FaultInIEFeature
GetClassFileOrMime
CoInternetParseUrl
ReleaseBindInfo
URLOpenStreamA

comctl32

ImageList_DragEnter
DrawInsert
ImageList_Remove

user32

CreateDialogParamA
CreateWindowExA
MessageBoxA
MessageBeep
DestroyWindow

kernel32

BackupRead
DuplicateHandle
CommConfigDialogW
CancelIo
EnumTimeFormatsW
ExitProcess

msvcrt

memcpy
memcmp
strstr
strlen
strcpy

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 512KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE