cc508774f57664857aa7b6ead5a23178 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc508774f57664857aa7b6ead5a23178
Size

61KB
MD5

cc508774f57664857aa7b6ead5a23178
SHA1

a754449bac1d59360794de269f5aef0a07252b7e
SHA256

0bed4f5e45a4da75f2d6f236f796d78dcae29a126709c80e35e9cedea762353f
SHA512

4ef975376fc6cbe30e459b07c6fbb946d40a7c743348da2328497ec6bc655ed23e9551f885690fccc06569cdaf06052b6771cd99298d490ddcec7c5ab8408110
SSDEEP

1536:FnkXwLrPAyOVtPSa7bdla/Otg4Yxl+61NMCAUHRXa:FMwLrPAVdKAgLVWpyX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc508774f57664857aa7b6ead5a23178

Files

cc508774f57664857aa7b6ead5a23178
.exe windows:4 windows x86 arch:x86

acb329246d9827cd008494718ad202df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

ShellExecuteA

Sections

.text
Size: 51KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE