cce6c28296a4a1cf44419f4ac731092e | Triage

Sharing

General

Target

cce6c28296a4a1cf44419f4ac731092e
Size

143KB
MD5

cce6c28296a4a1cf44419f4ac731092e
SHA1

512b0ebec814e1480e79ccd4a35d9e2b05ee60ca
SHA256

730d552357f441685f1eed4e57a45263cf2f49a4003888fb7933904d462fe5b4
SHA512

4f05a4060cd011eb91b1d4d880dcec412b7b419c162166d48efefaf09bada92bf4362a6d9d10e9737ff0962cbd6708ac45202d323bd36a6d1db1b3a35a7f502b
SSDEEP

1536:qVcvrolooifsgO0kAOn7y5Bjf4qK1q7qGPHDe3dumFSeiyNssiJldTLQiHW8PeDo:q+XpfkAgUIYHatuMFQsiRcMPezRewRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cce6c28296a4a1cf44419f4ac731092e

Files

cce6c28296a4a1cf44419f4ac731092e
.exe windows:4 windows x86 arch:x86

d2bbddb8c010773f04c2d9dd29668462

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 133KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE