3cc9d48fb26cbf468ef0300ee97ccc51 | Triage

Sharing

General

Target

3cc9d48fb26cbf468ef0300ee97ccc51
Size

22KB
MD5

3cc9d48fb26cbf468ef0300ee97ccc51
SHA1

af16a086e023df9de80bff2ea24a144b9e4c6ddc
SHA256

f6788d75951585273252b0aeac7f532403510fe34905006ea01055c79d3d2e1d
SHA512

110c99aa747c3a436c8788d3485339c3bef4301c6c7f4b13eb4178dd46d26f4b907ff310b7edf5b35b79bbab0ea68bee360827f1fcd254d728302b123a5d7c69
SSDEEP

384:ja1lgV8k8wmhzzg9wCqpqogqEPe4ncOftbKPg5rJezopyX5vyks9d:O1VNgqt0tbKPg2zop+vyk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc9d48fb26cbf468ef0300ee97ccc51

Files

3cc9d48fb26cbf468ef0300ee97ccc51
.exe windows:4 windows x86 arch:x86

36f1194ca50bebd7ae75b9fec19cb0a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
lstrlenA
Sleep
lstrcmpA
FindClose
FindNextFileA
UnmapViewOfFile
FindFirstFileA
lstrcatA
lstrcpyA
FreeLibrary
VirtualAlloc
GetProcAddress
LoadLibraryA
GetVersionExA
GetFileSize
CloseHandle
SetPriorityClass
GetCurrentProcess
CreateProcessA
WriteFile
LockResource
LoadResource
FindResourceA
CopyFileA
GetSystemDirectoryA
GetSystemTime
GetCurrentProcessId
HeapAlloc
GetVersion
GetEnvironmentVariableA
ExpandEnvironmentStringsA
CreateFileA
GetProcessHeap
CreateFileMappingA
MapViewOfFileEx
CreateThread
GetModuleFileNameA
GetModuleHandleA
ExitProcess
TerminateProcess

user32

wsprintfA

advapi32

RegFlushKey
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA

ws2_32

htonl
connect
htons
gethostbyname
socket
inet_ntoa
accept
recv
bind
send
WSAGetLastError
__WSAFDIsSet
ioctlsocket
select
inet_addr
WSAStartup
closesocket
listen

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ