cc7be3074f17678edbf25a3b52b8b2a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc7be3074f17678edbf25a3b52b8b2a5
Size

95KB
MD5

cc7be3074f17678edbf25a3b52b8b2a5
SHA1

b8aab99676a239a20b5f12604bb74fd25e6a3198
SHA256

69dca651e2e0cc06aa8762cd9102312ecbd7c190d484f61337d12dc4d995139a
SHA512

7b35b34f0aa4b0b0fdf18b0528e1c4136d6e2487ed597b6355b2a68e2c911fc494596a53429d79eb3e51ed96c01d7bbc384fded44d517482cbc0619eecb2bcc2
SSDEEP

1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cU:nqV9MziU4piRun7C3CP3MT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc7be3074f17678edbf25a3b52b8b2a5

Files

cc7be3074f17678edbf25a3b52b8b2a5
.exe windows:5 windows x86 arch:x86

0387d7197769bd3cd788524003bf2efa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

.MPRESS1
Size: 35KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE