cc123ee4cd2edbf80892984cf1385800N[.]exe

General

Target

cc123ee4cd2edbf80892984cf1385800N.exe
Size

252KB
MD5

cc123ee4cd2edbf80892984cf1385800
SHA1

0b6c15c7facd1a6a6d3367a80557e7c63985a26f
SHA256

87d77804e585f776d21055b1904d8f9f090759be874b43ba2bef89248c8cd260
SHA512

2054acd709f5635dfb222b07e02e16218ffd8dba1a98114fcda61ebe562ffb20e2838054472f368b4934991781d8505ecdc0b447b7c1c9a172a57c76a1b81461
SSDEEP

6144:HV0eSSFMOuPrFchbCshMKOPnwHrkS7xY+Zi:HV0rSLuhOCs+3+xk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc123ee4cd2edbf80892984cf1385800N.exe

Files

cc123ee4cd2edbf80892984cf1385800N.exe
.dll windows:4 windows x86 arch:x86

1fe6bec0e40ec380f0482dce56ab75a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlMoveMemory
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
lstrlenA
RtlFillMemory
CreateThread
CloseHandle
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CreateDirectoryA
SetFileAttributesA
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA
WriteFile
GetPrivateProfileStringA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
RaiseException
GetCPInfo
GetACP
GetOEMCP
SetFilePointer

shlwapi

StrToIntExA
PathFileExistsA

shell32

SHGetSpecialFolderPathA

ntdll

RtlCompareMemory

user32

wsprintfA
MessageBoxA

Exports

Exports

ȡ��ļ�Ŀ¼

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fe6bec0e40ec380f0482dce56ab75a5

Headers

File Characteristics

Imports

kernel32

shlwapi

shell32

ntdll

user32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 188KB - Virtual size: 193KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 188KB - Virtual size: 193KB

.reloc
Size: 8KB - Virtual size: 4KB