ccbd9a5b713e7263a7a9a6e365085476 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccbd9a5b713e7263a7a9a6e365085476
Size

52KB
MD5

ccbd9a5b713e7263a7a9a6e365085476
SHA1

c77a060ef99425458efa5bc224d61bb33a1eb3c2
SHA256

25c482bdcc31b38f4a6769d7479c0a1640feb4adb438aace3f60d44018327ab3
SHA512

a73606b8fd1a472c0ff503290348728ea6162c5423f42b95329c8386257eedf2ae7bd00044c46f708173ac072ef8cad06b0a968bb1fa5e9f1a9463508ea572ff
SSDEEP

768:AGglkaKoh92GuWkutjpj0K+soGFAJyXSZagrnFYfuLXePuwZ:xglkaPeykCj+soGFAJyXsjPf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccbd9a5b713e7263a7a9a6e365085476

Files

ccbd9a5b713e7263a7a9a6e365085476
.exe windows:4 windows x86 arch:x86

edcc73e526c17675402111cd68463c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
GetCommandLineW
lstrlenA
GetTickCount
LocalAlloc
GetLastError
GetProcAddress
GetModuleHandleA
GlobalAlloc
GetCommandLineA
GetStartupInfoA

shlwapi

PathAddExtensionW

setupapi

SetupQueueDefaultCopyA

msvcrt

__setusermatherr
_onexit
__dllonexit
memmove
_controlfp
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE