cc0aba20f7299856b64bb471442d784b | Triage

Sharing

General

Target

cc0aba20f7299856b64bb471442d784b
Size

484KB
MD5

cc0aba20f7299856b64bb471442d784b
SHA1

d2e72b45d5a6f08210469ed14960a8461b04a829
SHA256

88e29b165f22416dab1e54c1470b5c054ec666e3ba41b0c4b6b750d034e3f759
SHA512

cc93aa2c1a48b08230609a7084db165148d509203360968d7152b52b8c201e5949b6f5a7ad65677371dd399f493c1b3dcec2f819b46524fe673c287ba799124e
SSDEEP

12288:qpL0oRVMMIqjBah9pZgv8TzNDf9jyFQfDQtgUnx8EOW4:rJEBmH+v8FD1LUnx8EO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc0aba20f7299856b64bb471442d784b

Files

cc0aba20f7299856b64bb471442d784b
.exe windows:4 windows x86 arch:x86

eea3c2d5c489754f8ad632d43a612044

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlDecodePointer

user32

RegisterHotKey
IsRectEmpty
GetOpenClipboardWindow
GetMessagePos

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE