cc683000fcdbc7f30d25993e8fe579cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc683000fcdbc7f30d25993e8fe579cd
Size

131KB
MD5

cc683000fcdbc7f30d25993e8fe579cd
SHA1

20a0caa70129924a05cf7f655c0189a0a8c41827
SHA256

794c0b4f048367720dfcddc01f6d5d29a5e7000b1ec308b6f0e598d8d2a2f7f0
SHA512

ce24455f929b65842110d407237705b145629b393cbb9a077169895bc3af28feb1fc5f777f235cad944df69b9f725ac19e44d1e8550b37e4b5d8d73b8716d0ca
SSDEEP

1536:jqP+5FxBEaK6wkpyUzpEqDrSxezb9AtnHPJ3hNs7izVJBvSqmHvJTMzUQgpEXXDg:jB5ixQpLDLzZAdF7ztvSjpydgarH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc683000fcdbc7f30d25993e8fe579cd

Files

cc683000fcdbc7f30d25993e8fe579cd
.exe windows:4 windows x86 arch:x86

63612be6ce0b8ddb3c0fe18b6d69006b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LocalAlloc
LocalFree
ExitProcess
lstrcmpiA
lstrcpyA
lstrlenA
lstrcatA
CloseHandle

user32

wsprintfA

gdi32

FloodFill

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ