cc182ddbab90d48ba7a6dcb92a1902a0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

cc182ddbab90d48ba7a6dcb92a1902a0N.exe
Size

92KB
MD5

cc182ddbab90d48ba7a6dcb92a1902a0
SHA1

17ae481b742cd54ae8f8c1970030ad39f027a83f
SHA256

aa2dda146ada1ebfd77edf9de1d45f9f723a7f9d4888814c090c5b728c86ba95
SHA512

4864a09027008f5355556d87ed46d8a499f4d65c249c4defe511f89d1d8d000f7c26ee8bef9b7daaf6495dc967b08fda671c9f8aaf1444982326bc6229b2b24d
SSDEEP

1536:EKQubLHehEIQJtmLIKHB5LSeYas2iT+BxrBuqbNVy0/PlHGbhXIHIa6dRl7/H0tQ:EKZLHe/+hKHtYaqkgqHycdmbdIHlCl7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc182ddbab90d48ba7a6dcb92a1902a0N.exe

Files

cc182ddbab90d48ba7a6dcb92a1902a0N.exe
.exe windows:4 windows x86 arch:x86

d9a7a0155e629e32d005305745a7dff6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
VirtualAlloc
WriteProfileSectionA
GetModuleHandleA
VirtualFree
LoadLibraryA
MoveFileWithProgressW
VirtualProtect
PostQueuedCompletionStatus
WriteProfileStringW
GetEnvironmentStringsA

msvcrt

abs
_statusfp
_controlfp
??0exception@@QAE@ABV0@@Z
_execv
__setusermatherr
memcpy
ispunct
_aexit_rtn
_ismbcdigit
_mbsspnp
_wutime64
_findfirsti64
rewind
_access
_wfreopen
_mbsnicmp
_dup

comdlg32

ChooseFontW
PrintDlgA
LoadAlterBitmap
ReplaceTextA
GetOpenFileNameW
PrintDlgW
ReplaceTextA
PageSetupDlgW
ChooseColorW
GetFileTitleA
PrintDlgExW
ChooseFontA
Ssync_ANSI_UNICODE_Struct_For_WOW
FindTextA
PrintDlgExA
GetSaveFileNameA
dwOKSubclass

winmm

mmioCreateChunk
DrvGetModuleHandle
mmioSeek
mciSetDriverData
midiInStart
waveInGetErrorTextA
mciGetErrorStringW
auxOutMessage
CloseDriver
midiInPrepareHeader
mmioInstallIOProcA
mciDriverYield
midiOutOpen

opengl32

glPrioritizeTextures
glTexCoord4f
glClearDepth
glPixelMapuiv
glTexCoord3d
glDisableClientState
wglSwapLayerBuffers
glLoadMatrixf
glSelectBuffer

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9a7a0155e629e32d005305745a7dff6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

comdlg32

winmm

opengl32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 21KB - Virtual size: 20KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 512B - Virtual size: 50B

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 512B - Virtual size: 50B