ccf01ae060670dd1babfb08a1c88e084

Sharing

Copy URL Twitter E-mail

General

Target

ccf01ae060670dd1babfb08a1c88e084
Size

196KB
MD5

ccf01ae060670dd1babfb08a1c88e084
SHA1

5535017b90d3a70eb53222b0707f123da5b8ee56
SHA256

ece0fd7cb403f60956d61691bebe2bb0c994c5bc2082bad22e49cf947610d613
SHA512

7fd9fbf4e43b8f3e5c3e176dbe37fa289ab619e81daf3b453e3c36e84d169128f0659961db33b4dd829fc81651f492672226dab09259ee8238916b369651e3be
SSDEEP

3072:tTa6h7jWUWDOqv6wSRajbL8OinyttoLt9QDC+TpcFEwSH2VyTBfC2bHxs:JadJv6wxwORtDDdTpgEOVyTBq2r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccf01ae060670dd1babfb08a1c88e084

Files

ccf01ae060670dd1babfb08a1c88e084
.exe windows:4 windows x86 arch:x86

b8d19b2249519c7830caa742cb407f0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
sprintf
fabs
ceil
malloc
floor
free
fopen
longjmp
_setjmp3
fclose
fseek
ftell
fread
pow
strcmp
strcpy
strncpy
strlen
strstr
atoi
localtime
mktime
gmtime
abort
_snprintf
__p__iob
fprintf
fwrite
fflush
exit
ferror
getenv
sscanf
fmod
sin
cos
abs

kernel32

GetModuleHandleA
HeapCreate
SleepEx
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
WriteFile
CloseHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
CreateFileA
ReadFile
CreateThread
Sleep
HeapReAlloc
DeleteFileA
GetLocalTime

comctl32

InitCommonControls
InitCommonControlsEx

user32

GetSystemMetrics
ReleaseDC
DestroyWindow
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
SetCursorPos
LoadImageA
SetCursor
GetWindowLongA
GetParent
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetWindowRect
GetKeyState
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
DestroyIcon
FillRect
GetIconInfo
DrawIconEx

gdi32

CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
DeleteObject
GetStockObject
GetObjectType
GetObjectA
GdiSetBatchLimit
GdiGetBatchLimit
CreateDIBSection
GetDIBits
CreateBitmap
SetPixel
GetTextExtentPoint32A
SetBkMode
SetTextAlign
SetBkColor
SetTextColor
TextOutA
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetPixel
CreateFontIndirectA
GetTextMetricsA

ole32

RevokeDragDrop
CoInitialize

wsock32

WSAGetLastError
getsockname
ntohs
closesocket
WSACleanup
WSAStartup
socket
inet_addr
gethostbyname
htons
connect
ioctlsocket
recv
send
sendto
bind
listen
accept
recvfrom

winmm

timeBeginPeriod
timeEndPeriod

Sections

.code
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8d19b2249519c7830caa742cb407f0f

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

ole32

wsock32

winmm

Sections

.code Size: 1024B - Virtual size: 558B

.text Size: 158KB - Virtual size: 158KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 700B

.code
Size: 1024B - Virtual size: 558B

.text
Size: 158KB - Virtual size: 158KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 700B