2ccf69cc5f7d2ab0df3f4b53f876abf1

General

Target

2ccf69cc5f7d2ab0df3f4b53f876abf1
Size

360KB
MD5

2ccf69cc5f7d2ab0df3f4b53f876abf1
SHA1

20293ac164ac342c216662aff7f93eee4134c7ab
SHA256

1cc8b3dda49f0422ef2f9dead9b4f3741a8cb17e3093c03680635a4a70aff614
SHA512

29ef5e8eabf0e49381c2bdc15f57c34bc59f1b515a990571c2743155ba1b507e10ed4aed1e408d2c46703137b2674a124b55f12315702790677b0c9ba088ef64
SSDEEP

6144:1VxD38iAoNbc5+4z4z45nGgyXVhWlmXsEpq6Vi2a:1Vdhc534s4gEH3pq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ccf69cc5f7d2ab0df3f4b53f876abf1

Files

2ccf69cc5f7d2ab0df3f4b53f876abf1
.exe windows:4 windows x86 arch:x86

08c3cfa15260bca26f874b5bdf8dd146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
ExitProcess
GetFileAttributesA
GetWindowsDirectoryA
GetVersionExA
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LocalAlloc
InterlockedExchange
RaiseException
GetLastError

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.perplex
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

08c3cfa15260bca26f874b5bdf8dd146

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 164KB - Virtual size: 164KB

.rsrc Size: 48KB - Virtual size: 48KB

.perplex Size: 120KB - Virtual size: 120KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 164KB - Virtual size: 164KB

.rsrc
Size: 48KB - Virtual size: 48KB

.perplex
Size: 120KB - Virtual size: 120KB