AAct[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AAct.exe
Size

2.9MB
MD5

ca06dc4df54c315df4a5999fc25c9545
SHA1

c0b03951dd86db6f395f73a6a0f7a1a06f3affb4
SHA256

580f7b881e500302f2b92a9a83107fd672fb103358ef66110264d5f94b98e18e
SHA512

dc8a869d62a458d59563aca1b43d552cbb5500229f5a3257a7a34f98924e78544704e7087294a10a6ebea06a267ea3c14b29bc42f6c6d874091cbcd1eb375a57
SSDEEP

49152:vlCxkLEzOTCXQxk/GruBcCUccghdcce+710D:vmX/GKBcjghPT7iD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AAct.exe

Files

AAct.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ