ccf7aca0e62ad90fd9c5f98d45777bd6

Sharing

Copy URL Twitter E-mail

General

Target

ccf7aca0e62ad90fd9c5f98d45777bd6
Size

778KB
MD5

ccf7aca0e62ad90fd9c5f98d45777bd6
SHA1

93553776fa7ff8619d70b2d3949d50f79bfd349a
SHA256

e507a6012ef168cfa0d504e9f905a0af216dbe4e9228df0b1a6b7187033f8c48
SHA512

50a1540b44b2ba95f9669962b412e56054c7b21c53e74ca6f8b9625fed89cd6742676bf7c8b9e3057106305f400a4f23353c18a9fb2ddbf81c86cd35d068cb00
SSDEEP

24576:TaDyf8Gj5o/0i5yvinZeRz8KS7DS4nW6LgD1T:Ta48GdeQvinZAS7p41T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccf7aca0e62ad90fd9c5f98d45777bd6

Files

ccf7aca0e62ad90fd9c5f98d45777bd6
.exe windows:6 windows x86 arch:x86

ab25b9b689bbf54de95436252d0db585

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CloseEventLog
FreeInheritedFromArray
GetInheritanceSourceW
InitializeSecurityDescriptor
IsValidSecurityDescriptor
ObjectCloseAuditAlarmA
ObjectOpenAuditAlarmA
OpenEventLogA

kernel32

CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateNamedPipeW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
DnsHostnameToComputerNameW
EnterCriticalSection
ExitProcess
FindFirstVolumeMountPointW
FindNextVolumeMountPointW
FindVolumeMountPointClose
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleMouseButtons
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemPowerStatus
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
Process32First
Process32Next
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
WriteFileEx
lstrcatA
lstrcatW
lstrcmpA
lstrcpyA
lstrcpyW
lstrcpynA
lstrlenW

gdi32

CreateDCA
DeleteDC
DeleteEnhMetaFile
GetBkColor
GetEnhMetaFileW
GetSystemPaletteUse
GetTextExtentExPointI
PlgBlt
SetBkColor

user32

CharNextA
EnumThreadWindows
GetClipboardFormatNameW
GetDC
GetMenuBarInfo
GetWindowLongW
MessageBoxA
RegisterClipboardFormatW
ReleaseDC
SetWindowLongW
WindowFromPoint
wsprintfA

wininet

HttpAddRequestHeadersA
HttpEndRequestA
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
HttpSendRequestExA
InternetConnectA
InternetOpenA
InternetQueryDataAvailable
InternetQueryOptionA
InternetReadFile
InternetSetOptionA
InternetWriteFile
InternetCloseHandle

Exports

Exports

ServiceStatusNotes
Partnerschaften
_raptor_basename
_raptor_check_world_internal
_raptor_free_id_set
_raptor_free_turtle_writer
_raptor_free_uri_detail
_raptor_id_set_add
_raptor_log_error_formatted
_raptor_new_id_set
_raptor_new_turtle_writer
_raptor_new_uri_detail
_raptor_parser_get_accept_header_all
_raptor_parser_log_error
_raptor_parser_log_error_varargs
_raptor_turtle_writer_csv_string
_raptor_turtle_writer_decrease_indent
_raptor_turtle_writer_increase_indent
_raptor_turtle_writer_literal
_raptor_turtle_writer_namespace_prefix
_raptor_turtle_writer_newline
_raptor_turtle_writer_qname
_raptor_turtle_writer_quoted_counted_string
_raptor_turtle_writer_raw
_raptor_turtle_writer_raw_counted
_raptor_turtle_writer_reference
_raptor_turtle_writer_set_option
_rdfa_create_context
_rdfa_free_context
_rdfa_get_buffer
_rdfa_init_context
_rdfa_iri_get_base
_rdfa_parse
_rdfa_parse_buffer
_rdfa_parse_chunk
_rdfa_parse_end
_rdfa_parse_start
_rdfa_set_buffer_filler
_rdfa_set_default_graph_triple_handler
_rdfa_set_processor_graph_triple_handler

Sections

.text
Size: 631KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab25b9b689bbf54de95436252d0db585

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

wininet

Exports

Exports

Sections

.text Size: 631KB - Virtual size: 632KB

.data Size: 102KB - Virtual size: 144KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 4KB

.edata Size: 8KB - Virtual size: 12KB

.rsrc Size: 6KB - Virtual size: 12KB

.reloc Size: 24KB - Virtual size: 28KB

.text
Size: 631KB - Virtual size: 632KB

.data
Size: 102KB - Virtual size: 144KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 6KB - Virtual size: 12KB

.reloc
Size: 24KB - Virtual size: 28KB