cc455c7911fe59570170fb1a1a3e497026dd65d25b1dd9c0e81806a993757fe0

General

Target

cc455c7911fe59570170fb1a1a3e497026dd65d25b1dd9c0e81806a993757fe0
Size

8KB
MD5

b1a6f71bcc9838cb1d26215b867ccdee
SHA1

b023d225e7d05fffc054e58625f6f38b5e236845
SHA256

cc455c7911fe59570170fb1a1a3e497026dd65d25b1dd9c0e81806a993757fe0
SHA512

6ab8220a08bfaa5abd9c824d97620972adb6c7705c239155c22c65730c53f848d06c56cc7444c7d117f32809eb7638653958af534e66851ccafba1e387f5a525
SSDEEP

96:yadaIHpbO0dLDXV53+BkhtkDkmjJxSEum2qpbC7tCEFOm2fG:Fda+pbX9+ihG7jJx3umtpAURG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc455c7911fe59570170fb1a1a3e497026dd65d25b1dd9c0e81806a993757fe0

Files

cc455c7911fe59570170fb1a1a3e497026dd65d25b1dd9c0e81806a993757fe0
.exe windows:5 windows x86 arch:x86

99304fef5e0901170f95bc8a1d759001

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW

msvcr90

__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
__p__fmode
_crt_debugger_hook
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_lock

wininet

InternetCloseHandle
DeleteUrlCacheEntryW
InternetOpenW

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
Sleep
ExpandEnvironmentStringsW
CreateFileW
CloseHandle
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId

user32

wsprintfW

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99304fef5e0901170f95bc8a1d759001

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

msvcr90

wininet

kernel32

user32

shell32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 512B - Virtual size: 482B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 512B - Virtual size: 482B