ccedcb0874cdfedc68b3f3c828d744c26d23926af45efeef73508b61d79064feN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ccedcb0874cdfedc68b3f3c828d744c26d23926af45efeef73508b61d79064feN.exe
Size

204KB
MD5

81fec5c76ce8ef51be4f893b16907c80
SHA1

792c2b37e7f9fd0902349759b747183a9e0e2ee0
SHA256

ccedcb0874cdfedc68b3f3c828d744c26d23926af45efeef73508b61d79064fe
SHA512

aac22ab33c00a2527721009456628edb9f53ef82f98a947710c68429b895ae3812d204fa50c9a99afe297a6519a5bab05914ee12869bca96e7c2cac3b23de655
SSDEEP

3072:U5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlA4:ULexkuRaX41xoyJV65gzyZko+uch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccedcb0874cdfedc68b3f3c828d744c26d23926af45efeef73508b61d79064feN.exe

Files

ccedcb0874cdfedc68b3f3c828d744c26d23926af45efeef73508b61d79064feN.exe
.exe windows:4 windows x86 arch:x86

add9e90fe8cc1a6d600a60e22be53bf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExW
lstrcat
CompareFileTime
SetEvent
GetTempPathA
CopyFileExA
GlobalDeleteAtom
CopyFileA
LocalFree
CopyFileExW
ExitProcess
ExpandEnvironmentStringsA
LoadLibraryA
GetLogicalDriveStringsW
GetCommandLineA
IsValidLocale
SetPriorityClass
GetThreadPriority
GetWindowsDirectoryW
GetTempFileNameA
GetDateFormatA
SetThreadPriority
EnumCalendarInfoW
GetNumberFormatW
MultiByteToWideChar
OpenMutexW
GetFileAttributesW
GetSystemDefaultLCID
ExpandEnvironmentStringsW
GetProcAddress
GetLogicalDriveStringsA
lstrcpynW
GetLogicalDrives
GetCurrentDirectoryA
IsBadReadPtr
GetStringTypeA

user32

SetFocus
RegisterClassExW
SetTimer
CharLowerA
ShowWindow
MessageBoxW
CopyImage
LoadImageA
GetClassLongA
RegisterClassExA
PostMessageW
SetParent
GetDlgItemTextA
DefWindowProcA
GetClientRect
SendMessageW
DefFrameProcA
EnumDesktopsA
SetForegroundWindow
InvalidateRect
CheckDlgButton
LoadMenuIndirectA
GetWindowTextLengthA
SetWindowTextW
GetDC
LoadBitmapA
SendDlgItemMessageA
DefWindowProcW
SetDlgItemTextA
SendDlgItemMessageW
ChildWindowFromPoint
DestroyIcon
ArrangeIconicWindows
DrawTextA
CreateDialogIndirectParamA
DefDlgProcW
CharUpperA
CharPrevW
GetScrollPos
UpdateLayeredWindow
CallWindowProcA
GetDC
SetWindowRgn

gdi32

CreateRoundRectRgn
ResetDCW
Arc
CreatePen
CreateColorSpaceW
GetTextExtentPointA
GetPath
OffsetClipRgn
RectInRegion

advapi32

RegRestoreKeyW
RegDeleteKeyA
RegSaveKeyA
RegReplaceKeyW
RegReplaceKeyA
RegOpenKeyExA
RegFlushKey

shell32

SHCreateDirectoryExW
ShellExecuteExW
ExtractAssociatedIconExW
DuplicateIcon
SHGetDataFromIDListA
StrChrA
SHGetFileInfoA
StrChrIW
ExtractAssociatedIconA

shlwapi

UrlCombineA
PathMakeSystemFolderA
UrlUnescapeW
SHRegSetUSValueA
SHCreateThread
PathAppendA
PathCombineW
PathIsLFNFileSpecA
PathSetDlgItemPathW
StrToInt64ExA
SHCreateStreamOnFileW
StrCSpnIW
ColorRGBToHLS
SHRegGetBoolUSValueW

oleaut32

VarUI4FromUI1
VarIdiv
VarCyFromUI1
VarDateFromUI2
VarI8FromI2
VarR4CmpR8
VarNumFromParseNum

opengl32

glGetTexImage
glRectsv

crypt32

CryptSIPPutSignedDataMsg
CryptEnumKeyIdentifierProperties

Sections

.pGCC
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XJy
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TvKn
Size: 3KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CA
Size: 4KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ylLMGt
Size: 512B - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Z
Size: 1KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

add9e90fe8cc1a6d600a60e22be53bf7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

oleaut32

opengl32

crypt32

Sections

.pGCC Size: 3KB - Virtual size: 3KB

.XJy Size: 9KB - Virtual size: 9KB

.TvKn Size: 3KB - Virtual size: 472KB

.CA Size: 4KB - Virtual size: 45KB

.data Size: 117KB - Virtual size: 327KB

.ylLMGt Size: 512B - Virtual size: 264KB

.Z Size: 1KB - Virtual size: 313KB

.rsrc Size: 62KB - Virtual size: 62KB

.reloc Size: 1024B - Virtual size: 758B

.pGCC
Size: 3KB - Virtual size: 3KB

.XJy
Size: 9KB - Virtual size: 9KB

.TvKn
Size: 3KB - Virtual size: 472KB

.CA
Size: 4KB - Virtual size: 45KB

.data
Size: 117KB - Virtual size: 327KB

.ylLMGt
Size: 512B - Virtual size: 264KB

.Z
Size: 1KB - Virtual size: 313KB

.rsrc
Size: 62KB - Virtual size: 62KB

.reloc
Size: 1024B - Virtual size: 758B