cc84bbbbab73b9d6ff6658301fc1388b

General

Target

cc84bbbbab73b9d6ff6658301fc1388b
Size

173KB
MD5

cc84bbbbab73b9d6ff6658301fc1388b
SHA1

16e1fccfd0e408623715bd3ff0fdc11b98ae8ee8
SHA256

51dd307e5324ba47460c9ae01ab689b803add31efe272bafb63ae9f525b1beba
SHA512

7d6f65dce2464296b59c85dc4c19ecb9b1bd6c675782f77d91ce573a790497b953c1b8cdbeb0cec3f306bdeb93ca27c97b614d0cff8e4f1e94e47c1c2d80cdd4
SSDEEP

3072:7T0FBV1xrVttiUMOX1QLBrjriqiihFEOGwjuSKaPQLW0IVJlGfVnArN:7TeBVHcYEjrB9HTGwj3HoLW0ItGfVnAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc84bbbbab73b9d6ff6658301fc1388b

Files

cc84bbbbab73b9d6ff6658301fc1388b
.exe windows:4 windows x86 arch:x86

00dc39efc72daff883850da60588c8b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

shlwapi

StrRetToStrA
PathIsFileSpecA
PathAppendA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathCreateFromUrlW

oleacc

CreateStdAccessibleObject

kernel32

GlobalFree
lstrcmpW
EnterCriticalSection
HeapSetInformation
FindAtomW
GetSystemDirectoryW
FlushInstructionCache
GetLocaleInfoW
GlobalUnlock
CreateFileW
GetComputerNameW
CloseHandle
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WaitForSingleObject
WaitForMultipleObjects
GlobalLock
GetModuleFileNameW
ProcessIdToSessionId
EnumResourceLanguagesW
RaiseException
lstrlenW
GlobalAlloc
GetTickCount
FormatMessageW
DeleteCriticalSection
GetStringTypeW
CreateThread
GetProcessId
GlobalHandle
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
Sleep
OpenProcess
LocalAlloc
GetCurrentProcess
lstrlenA
SetLastError
MulDiv
WideCharToMultiByte

Sections

.text
Size: 89KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00dc39efc72daff883850da60588c8b9

Headers

File Characteristics

Imports

shell32

shlwapi

oleacc

kernel32

Sections

.text Size: 89KB - Virtual size: 480KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 89KB - Virtual size: 480KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 512B - Virtual size: 4KB