cCk3kafeJnPc[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

cCk3kafeJnPc.exe
Size

12.2MB
MD5

861652f0e63addb3ef9af044cc0ff6d0
SHA1

0a1c6a3f9b9ea9dce97aff62422661a4ca29ccc3
SHA256

1548dcc4cb4b2bf68ac1f05e3b2c8b346b24a58866b0d8fc498ba9ea9460d7ed
SHA512

6c599f5c3477b118b400e163e7a1ff0570b9826d2a327c80558854ec40f39e73a09f3e2cc190249abbe7fa4600de1acf019316098045353f9049654c9f80c7f3
SSDEEP

196608:Vs2uIjMev+I4Ba9AVhmzKp5izlfLs2Dl/CyygdlDmdT14hBNTMg9NXTJTjlZflua:Zd+IN9DzfzpL5VCqDmD4hBSg9J5JE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cCk3kafeJnPc.exe

Files

cCk3kafeJnPc.exe
.exe windows:6 windows x64 arch:x64

ef10756a1f258c05c96eb9224d98d5bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiDestroyDeviceInfoList

kernel32

Process32FirstW

user32

SendMessageA

advapi32

CryptEncrypt

shell32

ShellExecuteA

ole32

StringFromGUID2

dpp

?set_timestamp@embed@dpp@@QEAAAEAU12@_J@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmReleaseContext

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

normaliz

IdnToAscii

wldap32

ord22

crypt32

CertEnumCertificatesInStore

ws2_32

sendto

shlwapi

PathRemoveFileSpecA

rpcrt4

UuidCreate

ntdll

NtQuerySystemInformation

urlmon

URLDownloadToFileA

mpr

WNetGetProviderNameA

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

d3d11

D3D11CreateDeviceAndSwapChain

dbghelp

SymCleanup

vcruntime140

memchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_exit

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-stdio-l1-1-0

feof

api-ms-win-crt-heap-l1-1-0

realloc

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-math-l1-1-0

sinf

api-ms-win-crt-convert-l1-1-0

wcstombs_s

api-ms-win-crt-time-l1-1-0

_difftime64

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-environment-l1-1-0

getenv

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.red0
Size: - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.red1
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.red2
Size: 12.2MB - Virtual size: 12.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef10756a1f258c05c96eb9224d98d5bc

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

user32

advapi32

shell32

ole32

dpp

msvcp140

imm32

d3dcompiler_43

dwmapi

normaliz

wldap32

crypt32

ws2_32

shlwapi

rpcrt4

ntdll

urlmon

mpr

d3dx11_43

d3d11

dbghelp

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

Sections

.text Size: - Virtual size: 1.3MB

.rdata Size: - Virtual size: 348KB

.data Size: - Virtual size: 3.1MB

.pdata Size: - Virtual size: 58KB

.red0 Size: - Virtual size: 7.0MB

.red1 Size: 1024B - Virtual size: 632B

.red2 Size: 12.2MB - Virtual size: 12.2MB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 1.3MB

.rdata
Size: - Virtual size: 348KB

.data
Size: - Virtual size: 3.1MB

.pdata
Size: - Virtual size: 58KB

.red0
Size: - Virtual size: 7.0MB

.red1
Size: 1024B - Virtual size: 632B

.red2
Size: 12.2MB - Virtual size: 12.2MB

.rsrc
Size: 512B - Virtual size: 480B