cc37a11ba7c380542e157b168c5a1618 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc37a11ba7c380542e157b168c5a1618
Size

54KB
MD5

cc37a11ba7c380542e157b168c5a1618
SHA1

d52aea58848e8f018032170a27c10e6e41801ff0
SHA256

2a3516f32e5f5e879a9d7da4983284a5730419bbdda9c4fd9e1c3dfd85ad26fb
SHA512

1793b79306089ed4333fc1134e0bb3c402fb6956f66a03489d72c7da49ef5cf57042ea0127bdf3dc550bdfa23c6dca70bbf73fb6f96568fd14ae223f052c566d
SSDEEP

768:9vSQSUHrJd5RqDxANOFiO7uRIj2s8yVnqxom1Gs8TwhlOSL0:9vKSJoyJrU2s8Gqc8hZA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc37a11ba7c380542e157b168c5a1618

Files

cc37a11ba7c380542e157b168c5a1618
.exe windows:4 windows x86 arch:x86

4a2a2c5f002530bc39289b0458b2404f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBA
EnumResourceNamesW
ExitProcess
GetAtomNameW
GetCPInfoExA
GetDateFormatA
GetProfileSectionA
GetProfileSectionW
GetProfileStringW
GetWindowsDirectoryA
SetComputerNameW
SetFilePointer
SetPriorityClass
UnhandledExceptionFilter
_lcreat

advapi32

AllocateLocallyUniqueId
CryptDeriveKey
CryptGenRandom
GetSecurityDescriptorLength
PrivilegedServiceAuditAlarmW
RegLoadKeyW
SetEntriesInAuditListW

user32

ActivateKeyboardLayout
GetMenuItemInfoW
GetWindowContextHelpId
GetWindowInfo
GetWindowTextLengthA
IsCharLowerA
IsZoomed
LoadBitmapW
SetWindowsHookW
ShowOwnedPopups

gdi32

CreateFontW
EnableEUDC
ExtCreatePen
ExtFloodFill
GetCharWidth32W
GetCurrentPositionEx
GetEnhMetaFileBits
GetMetaFileW
GetPaletteEntries
GetPixelFormat
OffsetViewportOrgEx
PolyTextOutA
SetRectRgn
SetViewportExtEx
SwapBuffers

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE