ccd71bed0e3ad5d93b60b38bd6c4bc953245aafa6f6f16455dd1026f18613768[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ccd71bed0e3ad5d93b60b38bd6c4bc953245aafa6f6f16455dd1026f18613768.exe
Size

94KB
MD5

49835d434bc76968beaa025f25d63467
SHA1

61ccd49b53a37b3ed17be6c729ea5b0c55b976de
SHA256

ccd71bed0e3ad5d93b60b38bd6c4bc953245aafa6f6f16455dd1026f18613768
SHA512

4f4da526ccb39965e1b4ca9ff8874e627cbb3d8dc3c4ad0ef42ea4df1f11f49362a20280c562cf1b9f1f4b40140d8852a54286aef18910ee0899694a4b5c823c
SSDEEP

1536:G3jkEKNFPyEqADF2V1xSRJd0DUw/uqwbDd7z58cKp6roQLwvRehmyCCg8fcjQv:nPnqkE1xSRJd0DhidhKA2RZyCCg8fck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccd71bed0e3ad5d93b60b38bd6c4bc953245aafa6f6f16455dd1026f18613768.exe

Files

ccd71bed0e3ad5d93b60b38bd6c4bc953245aafa6f6f16455dd1026f18613768.exe
.exe windows:4 windows x86 arch:x86

e29216111be8758f004d4ae8b6c1fd97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA
mciSendStringA

kernel32

QueryPerformanceCounter
VirtualQuery
VirtualProtect
GetLocaleInfoA
CreateFileA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetACP
GetFileType
GetStdHandle
SetHandleCount
ReadFile
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
SetFilePointer
GetCurrentProcess
TerminateProcess
ExitProcess
WriteFile
CloseHandle
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
CreateDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GetLastError
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
HeapAlloc
HeapFree
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetShortPathNameA
GetCommandLineA
GetModuleFileNameA
Sleep
RtlUnwind
FreeLibrary
LoadLibraryA
GetProcAddress
WinExec
GetTickCount
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetLocalTime
GetSystemInfo
GlobalMemoryStatus
GetVersion
GetComputerNameA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
SetEndOfFile
HeapSize
LCMapStringA

user32

GetSystemMenu
AppendMenuA
TranslateMessage
PeekMessageA
FindWindowA
DestroyWindow
GetFocus
SetFocus
DispatchMessageA
GetMessageA
CharUpperA
SendMessageA
SetTimer
LoadIconA
RegisterClassA
UpdateWindow
SetScrollRange
ShowScrollBar
ScrollWindow
SetScrollPos
KillTimer
PostQuitMessage
DefWindowProcA
InvalidateRect
IsWindowEnabled
GetActiveWindow
ShowWindow
SetActiveWindow
SetWindowPos
GetAsyncKeyState
GetSysColor
ShowCursor
SetCursorPos
GetClientRect
GetDlgCtrlID
GetDlgItemTextA
GetWindowTextA
IsDlgButtonChecked
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetCursorPos
MessageBoxA
wsprintfA
FillRect
LoadCursorA
SetCursor
BeginPaint
EndPaint
GetDC
ReleaseDC
GetSystemMetrics
MoveWindow
GetWindowRect
GetWindowLongA
SetWindowLongA
CallWindowProcA
CreateWindowExA
PostMessageA
GetMenu
SetWindowTextA

gdi32

SetPixel
GetPixel
SetStretchBltMode
StretchBlt
StretchDIBits
Rectangle
RealizePalette
BitBlt
DeleteDC
SelectPalette
SetDIBColorTable
CreatePalette
SetBkMode
LineTo
CreateSolidBrush
CreatePen
GetTextMetricsA
SelectObject
CreateFontIndirectA
DeleteObject
TextOutA
GetTextExtentPoint32A
GetTextExtentPointA
CreateCompatibleDC
CreateDIBSection
GetDeviceCaps
SetTextColor
GetStockObject
MoveToEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseColorA

advapi32

GetUserNameA

shell32

ShellExecuteA
ShellExecuteExA

Exports

Exports

_ll_callfunc@16

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e29216111be8758f004d4ae8b6c1fd97

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 25KB

.rsrc Size: 1024B - Virtual size: 944B

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 25KB

.rsrc
Size: 1024B - Virtual size: 944B