ccb4c4b332258fd7736680cab419f619 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccb4c4b332258fd7736680cab419f619
Size

16KB
MD5

ccb4c4b332258fd7736680cab419f619
SHA1

c137318eec62e4ef930e1ff131c8614435a2a828
SHA256

d474a3d403315923cc2d9e1d4a9d0cb2118ba649d5ea3b9d48ffd9cf824d9a64
SHA512

b604b01a5e29063c118babebd52b6372bffefb5388db558d5ab5ef3410414dfcd365331af6af0bc51f8758431e627519eba5c5057af3e5ba48fe267cfb582625
SSDEEP

192:jjpUq4z8mwLl98ewsaVeYB2p3aB+EbR8j8T1fB6jV2hWEjbxEnnNzh2Po:3pl48bLliepaVXz+Eb9Fa208xEnN4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccb4c4b332258fd7736680cab419f619

Files

ccb4c4b332258fd7736680cab419f619
.exe windows:1 windows x86 arch:x86

04c9dad1102153696a563b0724502821

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE