7a1293f9b70f007dc31050a70e8a56cb07f149e03297b0930159afdfd74289a6

Sharing

Copy URL

Twitter E-mail

General

Target

7a1293f9b70f007dc31050a70e8a56cb07f149e03297b0930159afdfd74289a6
Size

2.8MB
MD5

9d86d97324603fe234831ad82221f5d8
SHA1

081a7a6ffd1a4a10516f88b0ec285d2f45575cff
SHA256

7a1293f9b70f007dc31050a70e8a56cb07f149e03297b0930159afdfd74289a6
SHA512

770136f2fd451141a05363feb767ec8dc46f5e0b3f0ffdd3d909e2e13b788a04121173b6bcdbc39d6e7b0e6df7e3e17e8f3d4ef729225fd80076bd22a050e680
SSDEEP

49152:4EEqgWQas1IPT7dOFb7qGE/Dl3O6JGnKZuDuhb6kpMJcc782FstePaxFYq/QtsE9:/E2Qu77dw7qfA6J45DuhPpMH78MscCxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Acute Systems TransMac 14.8/Crack/patch.exe

Files

7a1293f9b70f007dc31050a70e8a56cb07f149e03297b0930159afdfd74289a6
.zip
Acute Systems TransMac 14.8/Crack/Readme.txt
Acute Systems TransMac 14.8/Crack/patch.exe
.exe windows x86

8961bdb9106de9667dec54236d8623d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
DecodePointer
HeapSize
FlushFileBuffers
LCMapStringW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetLastError
MapViewOfFile
CreateFileMappingW
CopyFileW
GetFileSize
UnmapViewOfFile
SetEndOfFile
SetFilePointer
FreeLibrary
GetProcessHeap
GetProcAddress
HeapAlloc
SetLastError
HeapFree
LockResource
LoadResource
SizeofResource
FindResourceA
ExitProcess
WaitForSingleObject
GetCurrentDirectoryA
CloseHandle
CreateFileW
WriteFile
QueryPerformanceCounter
CreateThread
QueryPerformanceFrequency
GetExitCodeThread
ExitThread
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
HeapReAlloc
WideCharToMultiByte
GetFileType
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
EncodePointer
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
Sleep
SetThreadPriority
RaiseException
RtlUnwind
WriteConsoleW

user32

GetClientRect
EndPaint
BeginPaint
GetDC
LoadBitmapA
ReleaseDC
GetDlgItem
SetWindowTextA
wsprintfW
PostMessageW
EndDialog
ShowWindow
GetWindowTextA
MapWindowPoints
MessageBoxA
MoveWindow
LoadIconW
GetParent
DialogBoxParamW
GetWindowRect
FillRect
SendMessageW

gdi32

GetTextExtentPoint32A
SetBkMode
LineTo
CreatePen
MoveToEx
SetBkColor
CreateSolidBrush
AddFontMemResourceEx
RemoveFontMemResourceEx
BitBlt
CreateFontW
SetTextColor
TextOutA
GetTextExtentPointA
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
SetPixel
GetPixel
DeleteDC
GetObjectW
DeleteObject

comdlg32

GetOpenFileNameW

advapi32

GetUserNameA

ntdll

NtSetTimerResolution
NtQueryTimerResolution

winmm

waveOutGetPosition
waveOutReset
waveOutWrite
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 364KB - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Acute Systems TransMac 14.8/setup.exe
.exe windows x86

Code Sign

b9:f8:87:72:22:53:9d:7d:e7:69:e9:fd:8a:b4:8c:1c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

27-01-2021 00:00

Not After

27-01-2024 23:59

Subject

CN=Acute Systems,O=Acute Systems,POSTALCODE=60189,STREET=20 Danada Square West #139,L=Wheaton,ST=Illinois,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

84:64:c4:60:da:95:b8:e8:f2:ac:5c:2c:f0:02:ad:c6:63:79:a2:32:50:0b:93:fb:84:6c:a9:cc:8c:ed:b3:42
Signer

Actual PE Digest

84:64:c4:60:da:95:b8:e8:f2:ac:5c:2c:f0:02:ad:c6:63:79:a2:32:50:0b:93:fb:84:6c:a9:cc:8c:ed:b3:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8961bdb9106de9667dec54236d8623d1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ntdll

winmm

Sections

.text Size: 114KB - Virtual size: 113KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 2KB - Virtual size: 37KB

.rsrc Size: 394KB - Virtual size: 393KB

.reloc Size: 364KB - Virtual size: 936KB

Code Sign

b9:f8:87:72:22:53:9d:7d:e7:69:e9:fd:8a:b4:8c:1cCertificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

84:64:c4:60:da:95:b8:e8:f2:ac:5c:2c:f0:02:ad:c6:63:79:a2:32:50:0b:93:fb:84:6c:a9:cc:8c:ed:b3:42Signer

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 37KB - Virtual size: 36KB

DATA Size: 1024B - Virtual size: 588B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 114KB - Virtual size: 113KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 2KB - Virtual size: 37KB

.rsrc
Size: 394KB - Virtual size: 393KB

.reloc
Size: 364KB - Virtual size: 936KB

b9:f8:87:72:22:53:9d:7d:e7:69:e9:fd:8a:b4:8c:1c
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

84:64:c4:60:da:95:b8:e8:f2:ac:5c:2c:f0:02:ad:c6:63:79:a2:32:50:0b:93:fb:84:6c:a9:cc:8c:ed:b3:42
Signer

CODE
Size: 37KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 588B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 11KB