ccb1b5ea5c33f13fc5417d701196e327a33df83e7e23a25acf43465b333b6a94

Sharing

Copy URL Twitter E-mail

General

Target

ccb1b5ea5c33f13fc5417d701196e327a33df83e7e23a25acf43465b333b6a94
Size

57KB
MD5

dd06a6a482e4925d5979bc8f2e900932
SHA1

5a5e5890ed58ea002686c34ce56ea57416fb6444
SHA256

ccb1b5ea5c33f13fc5417d701196e327a33df83e7e23a25acf43465b333b6a94
SHA512

d9202fef791355c762e7f7a738f2ca27daf9656b717051d2f170c8963229097fc022ac3ee136be6520d6c778619e59a4f5a61b2be1cea2ca1638228d896dfd9e
SSDEEP

768:FWOr7Q/5hqIX9Y4DKqW4kNiG0FcjKnpmfthzSx0x3ONM7+ECp7uP2nEWdKQ/v96o:Br65QIXZzA90F2wqPTx3po02/dKUl1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccb1b5ea5c33f13fc5417d701196e327a33df83e7e23a25acf43465b333b6a94

Files

ccb1b5ea5c33f13fc5417d701196e327a33df83e7e23a25acf43465b333b6a94
.exe windows:4 windows x86 arch:x86

66cf5b182c01cf8bd1d9348883f82c92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetStdHandle
GetThreadContext
GetThreadPriority
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleScreenBufferSize
SetConsoleTitleA
SetConsoleWindowInfo
SetCriticalSectionSpinCount
SetCurrentConsoleFontEx
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleOutputA

msvcrt

_getch
_kbhit
__getmainargs
__p__environ
__p__fmode
__set_app_type
_beginthreadex
_cexit
_endthreadex
_ftime
_iob
_onexit
_setjmp
_setmode
abort
atexit
calloc
clock
exit
fgets
fopen
fprintf
free
fwrite
longjmp
malloc
memcpy
memmove
memset
printf
rand
realloc
signal
srand
sscanf
strcpy
strlen
strtok
system
time
vfprintf
vsprintf
wcscpy

user32

FindWindowA
GetAsyncKeyState
GetWindowLongA
SetWindowLongA

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 82KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

66cf5b182c01cf8bd1d9348883f82c92

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 512B - Virtual size: 20B

.rdata Size: 3KB - Virtual size: 2KB

.eh_fram Size: 1024B - Virtual size: 988B

.bss Size: - Virtual size: 82KB

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 28B

.tls Size: 512B - Virtual size: 32B

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 512B - Virtual size: 20B

.rdata
Size: 3KB - Virtual size: 2KB

.eh_fram
Size: 1024B - Virtual size: 988B

.bss
Size: - Virtual size: 82KB

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 28B

.tls
Size: 512B - Virtual size: 32B