eccc8b0f1dbd7cce64fa8c04373eea29bdf65fdc873d0bdf79253c74baa36f69N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eccc8b0f1dbd7cce64fa8c04373eea29bdf65fdc873d0bdf79253c74baa36f69N
Size

57KB
MD5

2095975669e282f90b5fb096d2dca2b0
SHA1

106fd4e6f331971dee397c3a849cd2c70808dfcb
SHA256

eccc8b0f1dbd7cce64fa8c04373eea29bdf65fdc873d0bdf79253c74baa36f69
SHA512

f1406373a6de0792bc59433f953ca1979ebdd88654b7d57ec2b451a1c1d86a12d09f928823f66049f4e61b615a28b00f6a4a140578d4984626f53e593dafd1bd
SSDEEP

1536:9lDXTHQKDjEtqzDpku2juTJLpXJxJ1Ax:9lDXNX/yunVXJxJ1Ax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eccc8b0f1dbd7cce64fa8c04373eea29bdf65fdc873d0bdf79253c74baa36f69N

Files

eccc8b0f1dbd7cce64fa8c04373eea29bdf65fdc873d0bdf79253c74baa36f69N
.exe windows:4 windows x86 arch:x86

1633111f5fc9eca6af9bbff4572ec550

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu
LoadAcceleratorsA
LoadIconA
MessageBoxIndirectA
GetDlgItem
ShowCursor
ShowOwnedPopups
ToAscii
GetCursor
EndDialog
DrawTextA
DrawIcon
DestroyWindow
CreateDialogIndirectParamA
CreateAcceleratorTableA
CreateDesktopA
CharUpperBuffA
CharUpperA
CharNextA
ChangeMenuA
BeginPaint
OemToCharA
wsprintfA

kernel32

lstrcmpiA
lstrcatA
TlsAlloc
GetSystemTimeAsFileTime
EnumResourceLanguagesA
EnterCriticalSection
lstrcpyA

gdi32

PolyTextOutA
GetTextColor
GetPixelFormat
FillRgn
DeleteColorSpace
Polygon

Sections

.text
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE