cc431d64ea67dc265cbb63be1c660c3f881ede00774f439b97e5d6383d7f24e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc431d64ea67dc265cbb63be1c660c3f881ede00774f439b97e5d6383d7f24e8
Size

45KB
MD5

8c38fa6c96f2e9129628e2ed65d501bf
SHA1

ee6a6a690ece2b2cf16d6640b045e6f27e4683e8
SHA256

cc431d64ea67dc265cbb63be1c660c3f881ede00774f439b97e5d6383d7f24e8
SHA512

7e9c3ba3e4b753dba5751eff1b3137c1e3e2be0808d08cb4a81f5ad4c0d70d5a929abd704be1b1defcb3e161651e2276cb42b5e7a1e3ca31a8caca79f23bf472
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhg:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc431d64ea67dc265cbb63be1c660c3f881ede00774f439b97e5d6383d7f24e8

Files

cc431d64ea67dc265cbb63be1c660c3f881ede00774f439b97e5d6383d7f24e8
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE