cc318bd8e4a9d8cc8a4e6290a2f18539 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc318bd8e4a9d8cc8a4e6290a2f18539
Size

57KB
MD5

cc318bd8e4a9d8cc8a4e6290a2f18539
SHA1

c9a3151e6d4310b3624824cb92dcdf3866b818ea
SHA256

bb0956ff540490ab5d32a9663445ed562ddacc0457d3751bd8c0ac2f8fc70835
SHA512

b5edbebe45fa21ace442936078e397331b9de6e1965d43c8fdc64ab02030ef8785512a064f1d2fad8fac9ab79721f24a853ff00cab649a6f0858ee258f1e9f50
SSDEEP

1536:GJ0ovx8sia0G0J/oyt090Auqlnybbbw7deHyxRqF8:U5HiV/Bt090Auqkbbk7QHYR5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc318bd8e4a9d8cc8a4e6290a2f18539

Files

cc318bd8e4a9d8cc8a4e6290a2f18539
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE