ccab072c0edd124e0ec84c1bce75d4960b2e3f8a6e5d50b9d13103187fb4ae4b

Sharing

Copy URL Twitter E-mail

General

Target

ccab072c0edd124e0ec84c1bce75d4960b2e3f8a6e5d50b9d13103187fb4ae4b
Size

64KB
MD5

502fb4ff817bc433eb63768fc17d5ff5
SHA1

05bf004063d75a23ae4025a138f821fc43e46cb4
SHA256

ccab072c0edd124e0ec84c1bce75d4960b2e3f8a6e5d50b9d13103187fb4ae4b
SHA512

f0c499713ec8c7377e91f1e64d64b3f50f8cade2c949bcec5943815bee9b2a7749b63756224164b00109da74208d772410c9723a6484db9cbeceb95820a4ee1b
SSDEEP

768:PaYqpu25rV/UOf4/h/JRK915pyy/zqkobM2zvd3mvpLZAHCIzglmb1pSAnA3:tGuh/fKFUy/zqkoA2zvkpFAiIsmRpb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccab072c0edd124e0ec84c1bce75d4960b2e3f8a6e5d50b9d13103187fb4ae4b

Files

ccab072c0edd124e0ec84c1bce75d4960b2e3f8a6e5d50b9d13103187fb4ae4b
.exe windows:4 windows x86 arch:x86

f649d761cf7acc4e6c5d21de9ddc1919

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetConnectW
HttpOpenRequestW
InternetSetPerSiteCookieDecisionW
InternetAttemptConnect
InternetOpenW
InternetReadFile
InternetSetFilePointer
InternetClearAllPerSiteCookieDecisions
InternetOpenUrlW
InternetCloseHandle
InternetSetOptionW
InternetQueryDataAvailable

iphlpapi

GetIfTable

shlwapi

PathRemoveFileSpecW
PathMatchSpecW
PathCombineW
wvnsprintfW
StrStrIW
StrStrIA

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetVersionExA
VirtualAlloc
RtlUnwind
MultiByteToWideChar
WideCharToMultiByte
HeapCreate
CopyFileW
CreateThread
WaitForMultipleObjects
GetLastError
GetProcAddress
Sleep
CreateDirectoryW
FindFirstFileW
VirtualProtect
FindClose
GetTickCount
CreateProcessW
CloseHandle
DeleteFileW
SetUnhandledExceptionFilter
ExitProcess
ExpandEnvironmentStringsW
LoadLibraryW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetVersionExW
HeapAlloc
CreateWaitableTimerW
FindNextFileW
SetWaitableTimer
SystemTimeToFileTime
HeapFree
ReadFile
GetModuleFileNameW
WaitForSingleObject
GetTimeZoneInformation
CreateFileW
GetFileSizeEx
VirtualFree
GetProcessHeap
GetSystemTime
GetCurrentDirectoryW
ResumeThread
VirtualQuery
HeapReAlloc
GetFileSize
WriteFile
GetLocalTime
SetFilePointer
SetEndOfFile
GetModuleHandleW
GetCommandLineW

user32

GetWindowLongW
DispatchMessageW
GetForegroundWindow
CharLowerW
CreateWindowExW
FindWindowW
PeekMessageW
SetForegroundWindow
GetSystemMetrics
MessageBoxW
SetWindowPos
SetWindowLongW
SetParent

advapi32

RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetFolderPathW

ole32

CoCreateInstance
OleInitialize
CoInitialize

oleaut32

SysAllocString
VariantInit
SysFreeString
VariantClear

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f649d761cf7acc4e6c5d21de9ddc1919

Headers

File Characteristics

Imports

wininet

iphlpapi

shlwapi

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 58KB - Virtual size: 58KB

.data Size: 512B - Virtual size: 93KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 58KB - Virtual size: 58KB

.data
Size: 512B - Virtual size: 93KB

.reloc
Size: 4KB - Virtual size: 3KB