AAct_v4[.]2[.]8_x64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AAct_v4.2.8_x64.exe
Size

2.9MB
MD5

f4623705351eeebeeeb83054be49cf2e
SHA1

0bb267590f727d221f09805282b91ddc25e80ded
SHA256

8cdbc576f1b4e4ec94fb92f5532b9a74171a6c3a6664ed175938ca1bdf97b8b0
SHA512

78a76752e9d13996e0138b9498b34d4b4d2608b1dc6bb884d2da78f5f9d32c705cf77155a9567211a5f51be4d7f52573c74ee426f1d837d03dc486f047b70d23
SSDEEP

49152:RExHo53HyhmgTqpDe4Qxk/GruBcCUccghdcce+71y:my3/GKBcjghPT7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AAct_v4.2.8_x64.exe

Files

AAct_v4.2.8_x64.exe
.exe windows:5 windows x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.drectve
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ