Static task
static1
Behavioral task
behavioral1
Sample
ac.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ac.exe
Resource
win10v2004-20231023-en
General
-
Target
ac.exe
-
Size
11KB
-
MD5
ef174469061fd38464904731cf6f207c
-
SHA1
6fc814ee84fff4d1e7ab38e9784346bc4a4fa673
-
SHA256
f93150c82dcf7563a907cb499b96169aaa8000a52a38a189610055655f85e0fd
-
SHA512
8eebebcb177f3e1f06d93f1ff6c1e86451e48bc60f3f9628173193f63727fd1ff484b080d59ae10733800bbb2b4f0f6199af3683be64abc6579ce408faa728c8
-
SSDEEP
96:TW7Qi/eu3qFKzgGAQxpOJNLmcc1SMsPr+liT9l99zRVYin5N2hcBim7EB5tfAsDZ:+Q7u666mXgpl99zRVYi5pFW5tfBDSbT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac.exe
Files
-
ac.exe.exe windows:6 windows x64 arch:x64
6cd3bee96566a9b86b2d7d90c94ea5f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
netapi32
NetUserAdd
NetLocalGroupAddMembers
vcruntime140
__C_specific_handler
__current_exception
__current_exception_context
memset
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_crt_atexit
terminate
__p___argc
_initialize_onexit_table
__p___wargv
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_register_thread_local_exe_atexit_callback
_c_exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
kernel32
QueryPerformanceCounter
RtlLookupFunctionEntry
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ