cc3d33c3ed6e243448d797b6f7d2bd20N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc3d33c3ed6e243448d797b6f7d2bd20N.exe
Size

297KB
MD5

cc3d33c3ed6e243448d797b6f7d2bd20
SHA1

18a3288c07114539321a6632860f178499014078
SHA256

0dec6415b13890294ede8e0f36864eff7921a0c7be5f541c74ba7d5832f3e1d8
SHA512

1ff03d73d283f6432a380878890ab957890fceeebc5822fbc01542e0b5fb2f1842a04f12cdaf060108d15133984ce5b5e3badb4f1366063b20928fc6fed0df0c
SSDEEP

6144:CaCS9BF72qoNHHpndCujO4hmOkN/GwQ7yoLE8wud:dB0qKLCupmH8Lrwud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc3d33c3ed6e243448d797b6f7d2bd20N.exe

Files

cc3d33c3ed6e243448d797b6f7d2bd20N.exe
.exe windows:4 windows x86 arch:x86

cd69619a07848b2f243ae201105bc4e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
FindAtomA
GetSystemTime
LoadLibraryW
LocalFree
SetEvent
GetDiskFreeSpaceA
CreateThread
HeapCreate
GetFileAttributesA
GetTickCount
GetCommandLineW
SuspendThread
SetLastError
GetExitCodeProcess
GetModuleHandleA
CloseHandle
GetDriveTypeA
CreateFileA
GetComputerNameA

advapi32

IsValidSid
CreateServiceA
RegCloseKey
IsTokenRestricted
RegDeleteKeyA
RegEnumValueA
RegEnumKeyExA
CloseEventLog
GetFileSecurityA
GetLengthSid
RegQueryValueA
GetUserNameA
RegCreateKeyExA

dsprop

FindSheet
MsgBox
ReportError
CheckADsError
ErrMsg

powercfg.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 286KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ