cc20b81841ce424c7e30f4449b853adf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc20b81841ce424c7e30f4449b853adf
Size

60KB
MD5

cc20b81841ce424c7e30f4449b853adf
SHA1

bd83868007a82091fb1635cd3fa78eacf6ba8f69
SHA256

598725b90685d40bb50aa728c84fa212b22432ebd09d1b2c2ee8be7fde9146af
SHA512

95923ca325623cded1e787d361345b7bf6799b107a688711817ac7997476a8620d34e4ff52881d99bff89a8ea375adf4902472339f3d2abf23b59ba9183900d9
SSDEEP

1536:JCx6n51BAJuNYyeK/qSGebsARFtux6nfiQkc:JCxw5oJuNHqtUkxwql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc20b81841ce424c7e30f4449b853adf

Files

cc20b81841ce424c7e30f4449b853adf
.exe windows:4 windows x86 arch:x86

8f3201b86a860d738f92b7169c19f594

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateProcessA
GetFileTime
FindAtomA

user32

GetFocus
DrawIconEx

comctl32

ImageList_DrawEx
ImageList_EndDrag
ImageList_Draw
ImageList_Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 433B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ