cc4433b8731e820f8192a1cc9b11b29e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc4433b8731e820f8192a1cc9b11b29e
Size

359KB
MD5

cc4433b8731e820f8192a1cc9b11b29e
SHA1

15b7c81db6a36e9c5c616af0f3f24641ba1fe201
SHA256

1a84f6948840fc43d062f9108dc6bcafb9bc81c99a0c95db65f965de70962701
SHA512

851e286ee1adc931efd488f78c3e45e81563fab362abd3e13c2343974ec72f055c22df6f2672bb22c88c084171fcb0ea83109055b11c9c6d625f4b789eccc088
SSDEEP

6144:dEXYZLAC7zeuIEGXzHvTdiwpdqmks6czjzhHnZECNdimiK0RekOEtUQk3cYDt0pL:drZLACPeZEGjHvTnqmkIHnZ7dWK0RekX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc4433b8731e820f8192a1cc9b11b29e

Files

cc4433b8731e820f8192a1cc9b11b29e
.exe windows:1 windows x86 arch:x86

75ea55af94a78683b0b7f970e71532bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA

Sections

pec1
Size: 277KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE