cc06550540d0407a045d610b1e84d836

General

Target

cc06550540d0407a045d610b1e84d836
Size

66KB
MD5

cc06550540d0407a045d610b1e84d836
SHA1

004a60d355bad4a7c6c917d6068b5d820a53659e
SHA256

7de7fb4e7e476472e02384df35b628efe2d8ed1011ed58357a989004cecfc2b3
SHA512

b92418a734eb15eb0a8e485e2b783709885b1627a0ca631acc5bd717e69eb197fc6259332493774badb3efe67fdf43edd39fbd9ceafb52db36d6a501fda25c58
SSDEEP

1536:TxW4xSVlGCzWyMhp/brd/I/sQ+LdL1tpCJqzn61B:bSjGKKpvZI/sQw7pQqOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc06550540d0407a045d610b1e84d836

Files

cc06550540d0407a045d610b1e84d836
.exe windows:4 windows x86 arch:x86

517889a0af59dda348e28f758325ff6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ulib

??OTIMEINFO@@QBEEV0@@Z
??4BDSTRING@@QAEAAV0@ABV0@@Z
?Strlwr@WSTRING@@QAEPAV1@XZ
?WriteByte@STREAM@@QAEEE@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?IsYesResponse@MESSAGE@@UAEEE@Z
??0DSTRING@@QAE@XZ
??0BDSTRING@@QAE@ABV0@@Z
?Initialize@BSTRING@@QAEEPBDK@Z
??0PROGRAM@@IAE@XZ
?IsDrive@PATH@@QBEEXZ
?DeleteChAt@WSTRING@@QAEXKK@Z
??9WSTRING@@QBEEABV0@@Z
?ComputeCountSet@BITVECTOR@@ABEKXZ
?QuerySTR@WSTRING@@QBEPADKKPADKE@Z

advapi32

InitializeAcl
MapGenericMask
StartServiceW
QueryServiceStatus
RegOpenKeyW
LookupPrivilegeNameW
AllocateAndInitializeSid
GetSidSubAuthorityCount
OpenSCManagerW
OpenServiceW

msvcrt

_onexit
exit
strtol
abs
fopen
fclose
wcsncmp
_itoa
_getcwd
_except_handler3

kernel32

FindVolumeMountPointClose
OpenWaitableTimerW
SetConsoleOutputCP
CreateProcessA
HeapAlloc
SetEnvironmentVariableA
VerSetConditionMask
ReleaseSemaphore
GetConsoleKeyboardLayoutNameA

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

517889a0af59dda348e28f758325ff6c

Headers

File Characteristics

Imports

ulib

advapi32

msvcrt

kernel32

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 142KB

.rsrc Size: 1024B - Virtual size: 968B

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 142KB

.rsrc
Size: 1024B - Virtual size: 968B