cc7db394aa7f0967ae578cf67bf3e257

Sharing

Copy URL Twitter E-mail

General

Target

cc7db394aa7f0967ae578cf67bf3e257
Size

413KB
MD5

cc7db394aa7f0967ae578cf67bf3e257
SHA1

ecaf7f38f7682705bfe800eea6ce3156deb1ea95
SHA256

f8dff4420d9e59df787ed79e319e2bec560be280a7097f53e4c6d03adbca4248
SHA512

2654e9b3551cf9eb9bc927303d2b4ba5151ac2c231d6342d5e4512bfd65069e95ba07d7e2ff1fd24b6fae6471fd1c085c25bc50cb86b305638054c583de1bdae
SSDEEP

12288:uCEjFUR2gC3G68Z8qTkf1oP/9TdwyVw0g+c7:vR2JGTkf1odTdwyri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc7db394aa7f0967ae578cf67bf3e257

Files

cc7db394aa7f0967ae578cf67bf3e257
.exe windows:4 windows x86 arch:x86

d143ba98c52b0d40f1c1a2d3fe479057

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
PageSetupDlgA
GetOpenFileNameW

gdi32

SetTextAlign
PlayEnhMetaFileRecord
CopyMetaFileW
SetGraphicsMode
EndDoc
SetPixelFormat
RectInRegion
GetArcDirection

wininet

FtpRenameFileW
FindNextUrlCacheContainerW
InternetSetOptionW
InternetGetCertByURL
GopherCreateLocatorA
InternetShowSecurityInfoByURL
InternetGoOnlineW
InternetFindNextFileA
InternetSecurityProtocolToStringW
CreateUrlCacheEntryA
FindFirstUrlCacheContainerA
HttpQueryInfoA
FtpFindFirstFileW
InternetSetCookieA
FtpRenameFileA
InternetConfirmZoneCrossingW

advapi32

CryptSetProvParam
RegQueryMultipleValuesA
RegCreateKeyA
CryptEnumProviderTypesA
RegQueryMultipleValuesW
RegConnectRegistryW
LookupSecurityDescriptorPartsA
RegOpenKeyW
RegConnectRegistryA
RegDeleteValueA
CryptAcquireContextA
LookupAccountNameW
CryptSetKeyParam
CryptSignHashW
AbortSystemShutdownW
CryptHashSessionKey
CryptExportKey
CryptHashData

kernel32

TlsAlloc
CompareStringW
GetFileType
VirtualAlloc
HeapSize
LCMapStringA
SetHandleCount
GetDateFormatA
InterlockedExchange
HeapCreate
MultiByteToWideChar
WriteFile
EnterCriticalSection
GetModuleHandleA
GetOEMCP
VirtualQuery
LeaveCriticalSection
WideCharToMultiByte
GetProcAddress
GetProcessHeap
IsValidLocale
GetLocaleInfoW
GetLocaleInfoA
HeapReAlloc
TlsSetValue
SetConsoleCtrlHandler
GetACP
GetStartupInfoW
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetModuleFileNameW
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
GetTimeFormatA
SetEnvironmentVariableA
Sleep
GetCPInfo
GetCommandLineA
SetLastError
GetShortPathNameW
GetCommandLineW
GetTimeZoneInformation
FreeLibrary
TlsFree
UnhandledExceptionFilter
GetUserDefaultLCID
InterlockedIncrement
TlsGetValue
FreeEnvironmentStringsA
GetCurrentProcessId
VirtualFree
LoadLibraryA
DeleteCriticalSection
EnumSystemLocalesA
GetTickCount
QueryPerformanceCounter
LCMapStringW
CompareStringA
TerminateProcess
SetWaitableTimer
GetStringTypeA
GetStartupInfoA
GetLogicalDriveStringsA
GetCurrentThreadId
IsDebuggerPresent
GetEnvironmentStringsW
GetCurrentProcess
IsValidCodePage
RtlUnwind
GetStringTypeW
HeapAlloc
GetEnvironmentStrings
GetCurrentThread
GetStdHandle
GetVersionExA
InitializeCriticalSection
GetModuleFileNameA
InterlockedDecrement
ExitProcess
HeapDestroy

user32

AnyPopup
GetKeyNameTextW
GrayStringA
ReplyMessage
DdeQueryConvInfo
DispatchMessageA
GetWindowTextW
BroadcastSystemMessage
DragObject
LoadMenuIndirectW
SetWindowWord
GetKeyboardLayoutNameA
ExcludeUpdateRgn
ShowScrollBar
CallWindowProcA
GetClipboardSequenceNumber
GetThreadDesktop
GetWindowRect
ScrollWindowEx

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d143ba98c52b0d40f1c1a2d3fe479057

Headers

File Characteristics

Imports

comdlg32

gdi32

wininet

advapi32

kernel32

user32

Sections

.text Size: 137KB - Virtual size: 136KB

.data Size: 272KB - Virtual size: 289KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 137KB - Virtual size: 136KB

.data
Size: 272KB - Virtual size: 289KB

.rsrc
Size: 2KB - Virtual size: 2KB