cc215032217dcbfae613e0c60e1b5f0b

Sharing

Copy URL Twitter E-mail

General

Target

cc215032217dcbfae613e0c60e1b5f0b
Size

417KB
MD5

cc215032217dcbfae613e0c60e1b5f0b
SHA1

bc4d692aef61c4d8f44f85c3946ac72cbb8041fa
SHA256

c1ac639620ce23c91e029abe7f990381fc8665705d5ff33f5d4fcb57f839f6eb
SHA512

a32041f95b58d46b43ff3f7c779209149bf2e59cf123b8ad04230a6e260c6468222f588e648b948ecd54bc249046dfa6981f9024230d33c5f79c02ed023f49da
SSDEEP

12288:XbWoPB/SUkcIvhCfFtwrMmYQfrYt3WFIKEfc:XiiSZcIZEFtwwmYQfrW3W+tfc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc215032217dcbfae613e0c60e1b5f0b

Files

cc215032217dcbfae613e0c60e1b5f0b
.exe windows:4 windows x86 arch:x86

709feba83798c1fffc43908f1e0f247c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatA
IsValidCodePage
SetThreadIdealProcessor
CompareStringA
GetVersionExA
FreeEnvironmentStringsA
HeapAlloc
LoadLibraryA
GetCommandLineA
VirtualFree
CompareStringW
GetEnvironmentStringsW
EnumSystemLocalesA
GetLastError
InterlockedExchange
TlsGetValue
GetEnvironmentStrings
HeapSize
InitializeCriticalSection
DeleteCriticalSection
GetStringTypeA
GetStartupInfoA
IsBadWritePtr
GetStdHandle
CreateWaitableTimerA
LCMapStringW
GetTimeZoneInformation
HeapDestroy
GetProcAddress
GetACP
HeapCreate
HeapFree
LocalHandle
GetOEMCP
GetExitCodeProcess
LeaveCriticalSection
VirtualQuery
UnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
GetFileType
SetEnvironmentVariableA
GetCPInfo
GetUserDefaultLCID
HeapReAlloc
TlsSetValue
ExitProcess
FreeEnvironmentStringsW
EnterCriticalSection
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
TlsAlloc
GetModuleHandleA
GetSystemInfo
SetHandleCount
SetLastError
GetCurrentThreadId
WriteFile
IsValidLocale
GetLocaleInfoW
GetTimeFormatA
GetCurrentProcessId
GetModuleFileNameA
TlsFree
GetLocaleInfoA
ExitThread
GetTickCount
LCMapStringA
GetCurrentThread
GetStringTypeW
GetSystemTimeAsFileTime
VirtualProtect
RtlUnwind

gdi32

GetOutlineTextMetricsA
GetDeviceCaps
SelectObject
CloseMetaFile
GetTextExtentPoint32W
CopyEnhMetaFileW
GetROP2
GetPath
GetCharABCWidthsFloatA
PlayEnhMetaFileRecord
GetDIBits
CreateBitmapIndirect
PolyBezier
SetICMProfileA
ColorCorrectPalette
CreateDIBitmap
CopyEnhMetaFileA
SetBitmapDimensionEx
ExcludeClipRect
CreateColorSpaceW
AnimatePalette
SetMiterLimit
SetColorAdjustment
SetSystemPaletteUse

comdlg32

ReplaceTextW
FindTextA
ChooseColorW
ChooseFontW
ChooseColorA
GetSaveFileNameW
GetOpenFileNameA
ChooseFontA
PageSetupDlgW
GetFileTitleA
GetSaveFileNameA
GetFileTitleW
LoadAlterBitmap
FindTextW
ReplaceTextA
GetOpenFileNameW

advapi32

RegDeleteValueA
RegRestoreKeyA
CryptDecrypt
CryptEncrypt
CryptDuplicateHash
RegLoadKeyA
CryptDestroyKey
RegSaveKeyW
CryptSetProviderA
RegCreateKeyW
RegEnumKeyA
RegOpenKeyW
RegEnumValueW
CryptEnumProviderTypesA
AbortSystemShutdownW
RegDeleteKeyA
RegEnumKeyExA
LookupPrivilegeNameA
CryptVerifySignatureW
RegQueryValueA
CryptSetKeyParam
RegCreateKeyExA
ReportEventW
RegConnectRegistryW
RegSaveKeyA

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

709feba83798c1fffc43908f1e0f247c

Headers

File Characteristics

Imports

kernel32

gdi32

comdlg32

advapi32

Sections

.text Size: 136KB - Virtual size: 136KB

.data Size: 272KB - Virtual size: 282KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 136KB - Virtual size: 136KB

.data
Size: 272KB - Virtual size: 282KB

.rsrc
Size: 7KB - Virtual size: 7KB