cc1faf56c3c68a25057044332b6eac61

Sharing

Copy URL Twitter E-mail

General

Target

cc1faf56c3c68a25057044332b6eac61
Size

454KB
MD5

cc1faf56c3c68a25057044332b6eac61
SHA1

baa140d4b96694e38690fc655f0ee05f0d3f0b10
SHA256

79f388a2b5ec79a0ae354de47e455ed33309fbd9089e3d89b97daff910fc757d
SHA512

d5c51ed7689bc01103fea3d828f075b01053c24e7cba0cc855fc68fd850756c2c0fd2335d044e774546d7d9ce05af6beb623de1a4765a58834606f1ae73ade7d
SSDEEP

6144:O1qm6rBRO1BCOjY+KKjM/vKQqTfWM13mrQE7jRXQY7PO23xBPjm/apqzr+s3VlGJ:O1qmKeBC4IKw/vT1m2rb5hpdq/MI+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc1faf56c3c68a25057044332b6eac61

Files

cc1faf56c3c68a25057044332b6eac61
.exe windows:4 windows x86 arch:x86

61c95d7ad0f12176ce0691ae5eaa5f18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
TlsFree
GetProfileStringW
lstrcmpA
LCMapStringW
EnterCriticalSection
HeapAlloc
LoadLibraryA
GetCPInfo
GetVersion
GetFileTime
ReadConsoleOutputCharacterW
DeleteCriticalSection
GetFileType
InterlockedExchange
GetTickCount
GetEnvironmentStrings
SetHandleCount
SetLastError
ConvertDefaultLocale
GetStringTypeW
GetStdHandle
TlsAlloc
GetStringTypeA
GlobalGetAtomNameA
UnhandledExceptionFilter
IsBadWritePtr
MultiByteToWideChar
GetProcAddress
FreeEnvironmentStringsW
LeaveCriticalSection
HeapFree
GlobalFix
GetStartupInfoA
SetConsoleCursorPosition
VirtualFree
VirtualQuery
GetCommandLineA
WideCharToMultiByte
GetSystemTimeAsFileTime
GetEnvironmentStringsW
WriteFile
GetACP
LCMapStringA
HeapReAlloc
TlsSetValue
ExitProcess
FreeEnvironmentStringsA
HeapCreate
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
GetLastError
GetModuleHandleA
HeapDestroy
GetModuleFileNameA
InterlockedCompareExchange
GetCurrentThreadId
RtlUnwind
TlsGetValue
GetOEMCP
InitializeCriticalSection
GetCurrentProcessId

advapi32

RegReplaceKeyA
CryptHashSessionKey
RegCreateKeyA
CryptGenRandom
CryptSignHashW
LookupAccountNameA
CryptReleaseContext
CryptContextAddRef
LookupPrivilegeDisplayNameA
RegQueryValueA
RegDeleteKeyA
ReportEventA

user32

DdeInitializeW
CreateIconFromResource
ActivateKeyboardLayout
SetDlgItemInt
CloseClipboard
MonitorFromPoint
GetProcessWindowStation
DdeQueryNextServer
DdePostAdvise
PostThreadMessageW
SystemParametersInfoW
SetLastErrorEx
MapDialogRect
DdeFreeStringHandle
SetWindowTextA
IsCharUpperA

comdlg32

FindTextA
GetSaveFileNameW
ReplaceTextA
GetOpenFileNameA
ChooseFontW
ReplaceTextW

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61c95d7ad0f12176ce0691ae5eaa5f18

Headers

File Characteristics

Imports

kernel32

advapi32

user32

comdlg32

Sections

.text Size: 140KB - Virtual size: 139KB

.data Size: 305KB - Virtual size: 305KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 140KB - Virtual size: 139KB

.data
Size: 305KB - Virtual size: 305KB

.rsrc
Size: 8KB - Virtual size: 7KB