cc41fb0e29b234fa2a063172952108c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc41fb0e29b234fa2a063172952108c2
Size

397KB
MD5

cc41fb0e29b234fa2a063172952108c2
SHA1

b43d1d9a150cc671f17346c7f5f7a74188009689
SHA256

c8fd1962bbc203ea3c3397979db59a0b909a63f29ad829daa02a8f443c477941
SHA512

d122363c4fd5b9a411836c6f72be126a4f0cf832a72ecb9a0e0de06a358433aa4e8f92c4c80bcfcb17dd0bc8ab57266e53b62e3fd5fa65e67284979674491d8d
SSDEEP

12288:eLp/9Lgip9sk2kwkx2jjHMwaITqSFFFFXchU:e19g7q/xAMRufFFFFXce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc41fb0e29b234fa2a063172952108c2

Files

cc41fb0e29b234fa2a063172952108c2
.exe windows:4 windows x86 arch:x86

f50ee1814ba7a037bb7f302467addaf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
FindResourceExW
FindResourceW
GetLocaleInfoW
LoadResource
LockResource
GetStartupInfoA
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

__wgetmainargs
_initterm
memset
acos
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
__dllonexit
_onexit
_wcmdln
memcpy

msimg32

TransparentBlt

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ