emailmerge[.]cc-enterprise[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

emailmerge.cc-enterprise.exe
Size

347KB
MD5

75cb42b14c9b30844b7cd88db11da289
SHA1

9f73792d667aac497b4fa456c65959bb39aa4920
SHA256

303113037bff910266edb5fdb1da79ecd37b29a67b62acb76714604af2d1023d
SHA512

f0f431aa7f8a5770f0753782cd02bb5e5d1095ec7a88f4ba39d74457cd9067f67bcde00ef8db7be6781d71ae3042195fcefbfc32e299fc3bfcb9524969e39eeb
SSDEEP

6144:4Qmkfu0P7ki+PnAwfINGyubpP4GlaCnu6S4V/OqwFMATTctii/:1mUyPAMA84Glaou8V/kMETcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
emailmerge.cc-enterprise.exe

Files

emailmerge.cc-enterprise.exe
.exe windows:5 windows x86 arch:x86

caa5e6a2892587c2324418efee31c648

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

WSACleanup

winmm

mixerOpen

version

VerQueryValueW

comctl32

ImageList_Create

psapi

GetModuleBaseNameW

user32

GetDC

gdi32

BitBlt

comdlg32

GetOpenFileNameW

advapi32

RegCloseKey

shell32

DragFinish

ole32

CoGetObject

oleaut32

SafeArrayGetLBound

Sections

.MPRESS1
Size: 308KB - Virtual size: 884KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE