SecuriteInfo[.]com[.]Trojan[.]Wacatac[.]15750[.]9788

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Wacatac.15750.9788
Size

280KB
MD5

4c5c42179fe0ce3d01856469bdca3644
SHA1

05a32d7882369f7dfd06913463a1fe8d4388b146
SHA256

506423f42e5a748b4f8376d2ca423d5f1e8f8a4ba225e707573e63e859aec009
SHA512

ac1fb8b8e77b40af44cc8b59c1f7efc611a280ccf38045832b38e745c6366d8a497c958095134bce0c01aea78cb80631e0007be3c2cf04024c693fd241633c10
SSDEEP

3072:27BowFgQuJz0wXqi8Jjz5/zM/DCjC9Vzh7JwJoH8VhQRTYDC:mKTzlX58JH57uDCjC3zcw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Wacatac.15750.9788

Files

SecuriteInfo.com.Trojan.Wacatac.15750.9788
.dll windows:4 windows x86

f26e164038009fa8994b0ca878a25ab1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mixerSetControlDetails
waveInGetDevCapsA
mixerGetLineControlsA
mixerGetNumDevs
mixerGetDevCapsA
mixerGetLineInfoA
waveOutGetNumDevs
waveOutGetDevCapsA
mixerGetID
waveInGetNumDevs
mixerGetControlDetailsA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
GetProcAddress
LoadLibraryA
FreeLibrary
GetPrivateProfileIntA
GetPrivateProfileStringA
Sleep
DeviceIoControl
ReleaseMutex
WaitForSingleObject
CloseHandle
ExitThread
GetLastError
WaitForMultipleObjects
CreateThread
SetEvent
CreateFileA
CreateEventA
GetUserDefaultLCID
GetModuleFileNameA
GetWindowsDirectoryA
FindFirstFileA
GetVersionExA
GetLocalTime
WriteFile
SetFilePointer
lstrcpyA
lstrlenA
DisableThreadLibraryCalls
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
GetCurrentProcess
GetModuleHandleA
IsValidLocale
GetCPInfo
UnhandledExceptionFilter
IsBadCodePtr
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
ReadFile
SetStdHandle
SetConsoleCtrlHandler
RaiseException
FlushFileBuffers
CopyFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadReadPtr
GetLocaleInfoW
SetUnhandledExceptionFilter
MultiByteToWideChar
GetEnvironmentStringsW
GetEnvironmentStrings
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetTimeZoneInformation

user32

ExitWindowsEx
PostMessageA
RegisterWindowMessageA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenProcessToken

ole32

CoUninitialize
CoInitialize
CoCreateInstance

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

Exports

Exports

ClearToTerminate
CreateEventInterface
DestroyEventInterface
GetCapabilities
GetEventHandles
GetHWCachedInfoPtr
GetIndependentHeadphone
GetInterfaceVersion
GetJackDevice
GetJackFunction
GetOpMode
GetPlatformHWInformation
GetPlatformIDString
GetPlatformInformation
GetSPDIFCAPRATE
InitInterface
IsDriverLoaded
IsModulePresent
IsSilentRemoveRequired
IsUnInstallRequired
SMaxLog
SetIndependentHeadphone
SetJackDevice
SetSpeakerConfiguration
SetUserState
SetVRefLevel
SetVRefSettlingTime
SignalAudioDeviceRemoved
TerminateAllInst

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f26e164038009fa8994b0ca878a25ab1

Headers

File Characteristics

Imports

winmm

version

kernel32

user32

advapi32

ole32

setupapi

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 184KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 52KB - Virtual size: 121KB

.idata Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 184KB - Virtual size: 184KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 52KB - Virtual size: 121KB

.idata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 14KB