ccb07edf7810e6283a5b7d2bcb56455d

Sharing

Copy URL Twitter E-mail

General

Target

ccb07edf7810e6283a5b7d2bcb56455d
Size

858KB
MD5

ccb07edf7810e6283a5b7d2bcb56455d
SHA1

78513a0666cb3e22a2727cfb64846cc60826ca9b
SHA256

4c89f4a4cd6c90629683095a207f774e640543b71d33b22fc1200147aabfddf1
SHA512

bf2169b2c66b3cd7af0df7ea5f5d953faac968fd9061a6f5d8724b45b985e2ce0c5b0fd9d6fe9334f58e1aab5040db810358d6ea6757bf6a4288bbf00266e4d9
SSDEEP

24576:grn4qCEV1+G9zf8xZN3sBSrIBa6XUrGIwIJFXEq:IUkQb3lrmBXgGIwCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccb07edf7810e6283a5b7d2bcb56455d

Files

ccb07edf7810e6283a5b7d2bcb56455d
.exe windows:4 windows x86 arch:x86

530dcd1d94a8c614c3a451b519d48358

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

InitializeSecurityDescriptor
RegCloseKey
DeregisterEventSource
AbortSystemShutdownA
ObjectPrivilegeAuditAlarmA
CryptSetProviderA
AllocateLocallyUniqueId
CryptContextAddRef
CryptSetKeyParam
ClearEventLogA
CryptSetHashParam
AreAllAccessesGranted
CryptImportKey
ConvertAccessToSecurityDescriptorA
RegGetKeySecurity
RegEnumValueA
CryptHashData
RegQueryValueA
SetServiceStatus
CryptDecrypt
RevertToSelf
CryptHashSessionKey
GetNumberOfEventLogRecords
RegEnumKeyA
CryptGetDefaultProviderA
DestroyPrivateObjectSecurity
RegSetKeySecurity
GetExplicitEntriesFromAclA
CreateServiceA
SetEntriesInAclA
RegEnumKeyExA
ChangeServiceConfigA
GetAccessPermissionsForObjectA
GetSecurityDescriptorDacl
CryptGetProvParam
AccessCheck
CryptGetHashParam
OpenServiceA
ImpersonateLoggedOnUser
RegisterEventSourceA
RegOpenKeyA
StartServiceCtrlDispatcherA
CryptExportKey
CryptDeriveKey
GetSecurityInfo

user32

LockWindowUpdate
SetLastErrorEx
AlignRects
EnumWindows
DdeDisconnectList
DrawTextA
GetSubMenu
GetWindowRect
DdeSetUserHandle
DlgDirSelectComboBoxExA
SetClipboardViewer
SetMessageQueue
GetWindowThreadProcessId
ToAsciiEx
OpenClipboard
GetOpenClipboardWindow
SetPropA
RegisterClassExA
DdeQueryNextServer
ReleaseCapture
RealChildWindowFromPoint
DrawAnimatedRects
ChildWindowFromPoint
CreateIconFromResourceEx
UnpackDDElParam
DdeAddData
IsCharAlphaNumericA
HiliteMenuItem
DeleteMenu
DrawFocusRect
SetFocus
LoadCursorFromFileA
GetCaretBlinkTime
GetTopWindow
EnumDisplayDevicesA
SetSysColorsTemp
OpenWindowStationA
CharToOemA
DdeKeepStringHandle
ArrangeIconicWindows
CharNextA
GetScrollInfo
GetForegroundWindow
ChangeDisplaySettingsExA
GetListBoxInfo

shlwapi

SHSetThreadRef

Sections

.oxkt
Size: 635KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qlsx
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hgp
Size: 19KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hqtil
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vyl
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xqnur
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hkpov
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uxejub
Size: 48KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ulgl
Size: 124KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

530dcd1d94a8c614c3a451b519d48358

Headers

File Characteristics

Imports

advapi32

user32

shlwapi

Sections

.oxkt Size: 635KB - Virtual size: 1.3MB

.qlsx Size: 5KB - Virtual size: 5KB

.hgp Size: 19KB - Virtual size: 27KB

.hqtil Size: 512B - Virtual size: 20KB

.vyl Size: 6KB - Virtual size: 15KB

.xqnur Size: 512B - Virtual size: 56B

.hkpov Size: 512B - Virtual size: 24B

.uxejub Size: 48KB - Virtual size: 76KB

.ulgl Size: 124KB - Virtual size: 1.7MB

.rsrc Size: 18KB - Virtual size: 20KB

.oxkt
Size: 635KB - Virtual size: 1.3MB

.qlsx
Size: 5KB - Virtual size: 5KB

.hgp
Size: 19KB - Virtual size: 27KB

.hqtil
Size: 512B - Virtual size: 20KB

.vyl
Size: 6KB - Virtual size: 15KB

.xqnur
Size: 512B - Virtual size: 56B

.hkpov
Size: 512B - Virtual size: 24B

.uxejub
Size: 48KB - Virtual size: 76KB

.ulgl
Size: 124KB - Virtual size: 1.7MB

.rsrc
Size: 18KB - Virtual size: 20KB