cff9777ae20436994c4b382530b47e50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cff9777ae20436994c4b382530b47e50N.exe
Size

161KB
MD5

cff9777ae20436994c4b382530b47e50
SHA1

b7d9aecfcb121a6dc7d5824a0b6d5f4bcec9801d
SHA256

bcb23d52edab14e3e59291d4fb331c1fd5307c6bca54b51ef2bdbeca064c71d2
SHA512

ec155bfa898776b07475ad8c96a92fceea4322c377fb4aaf0c00cf5e0b6b6b7eaf69ec008fcd4576cdafbb2d59acd2e69a512cd3ad0a7e8d1c1c8cac5b621a33
SSDEEP

3072:6oQ6L4fcwkS3Xz9XoOSW8ouRZ9LFVf+hCZrSLQf4ItYOp+nv6/ci3:bJkfcKxXoTRZ9LC0Htvc6n3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cff9777ae20436994c4b382530b47e50N.exe

Files

cff9777ae20436994c4b382530b47e50N.exe
.exe windows:4 windows x86 arch:x86

85f72ebc41fec0fda68bfd9390632d5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
LCMapStringA
LoadLibraryA
CreateFileA
CloseHandle

user32

CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA

Sections

.text
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ