7ccc17791755202da5458128b08cf600N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ccc17791755202da5458128b08cf600N.exe
Size

30KB
MD5

7ccc17791755202da5458128b08cf600
SHA1

6dd3a7632860ee6f410dbf75e9b09195a8cb7ef3
SHA256

2d0e493d00f2c31751a4be6750fa716b07ca1482e0c2f0c8281239d383577a55
SHA512

6fb71aa9d4dcbcec40b923d42d7e90b341d93476352d1e4984d41de572e48f8817561fe6f0a84530a503379aa07ee08629eae0a29ca02c6c7bcb4cb86138d851
SSDEEP

384:+GQQena/PAvt8L9sZEKwKLbMC6uXAKIefslvEK1yi8:KeXrK/ZXAKIDh8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ccc17791755202da5458128b08cf600N.exe

Files

7ccc17791755202da5458128b08cf600N.exe
.dll windows:4 windows x86 arch:x86

9fc176c9d1fe775c8c21fc45320f4b01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
IsBadReadPtr
Sleep
VirtualProtect
WriteProcessMemory

msvcrt

_sleep
__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
strcpy

user32

FindWindowA
GetAsyncKeyState
MapVirtualKeyA
MessageBeep
MessageBoxA
SetCursorPos
keybd_event
mouse_event

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ