General

  • Target

    3b92fa9ce434d001e96d2d06c5664686

  • Size

    470KB

  • MD5

    3b92fa9ce434d001e96d2d06c5664686

  • SHA1

    57258b10f65a4844aaeb91dc11463da75f0fdd9c

  • SHA256

    2c8eea05fbefb03aab5dd72a414b2e4cb1204b64ab8332562356a5bc75e84228

  • SHA512

    4ea022ec2dff64aa5fb3e17210b674057fa30e9bfdb9ed19e98f73b6c0cbb0745f9d4f949cdb8f7632b8cecda4ea73f92fb8afd735abb4764d2f372979eab267

  • SSDEEP

    12288:QAtX7Li71verMkqAVn2UL1sdnZ+p+UOgnWDgkv:QWXqpvioE2UxkZ+pFkv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b92fa9ce434d001e96d2d06c5664686
    .zip
  • attocode.c
  • attocode.h
  • common/cmdline.c
  • common/cmdline.h
  • common/linked_list.c
  • common/linked_list.h
  • common/mem.c
  • common/mem.h
  • docs/AttoCode.txt
  • engine/imports.c
  • engine/imports.h
  • engine/loader.c
  • engine/loader.h
  • engine/modules.h
  • log/log.c
  • log/log.h
  • m.bat
    .bat .vbs
  • mall.bat
    .bat .vbs
  • mlog.bat
    .bat .vbs
  • mlogall.bat
    .bat .vbs
  • modules/hook/hook
  • modules/hook/hook.c
  • modules/hook/hook.exe
    .exe windows:4 windows x86 arch:x86

    dc02cffd5b1ae8e88c732a670b3cd4bc


    Headers

    Imports

    Exports

    Sections

  • modules/hook/hook.h
  • modules/hook/hook.o
  • modules/hook/lde32.lib
  • modules/hook/linked_list.o
  • modules/hook/m.bat
    .bat .vbs
  • modules/hook/mem.o
  • modules/psapi/libntdll.a
  • modules/psapi/linked_list.o
  • modules/psapi/m.bat
    .bat .vbs
  • modules/psapi/mem.o
  • modules/psapi/mod_psapi.c
  • modules/psapi/mod_psapi.h
  • modules/psapi/mod_psapi.o
  • modules/psapi/psapi
  • modules/psapi/psapi.exe
    .exe windows:4 windows x86 arch:x86

    5a0ed1364799396fe2f24193d6f7ffd8


    Headers

    Imports

    Exports

    Sections

  • modules/samples/hooksmpl/hooksmpl
  • modules/samples/hooksmpl/hooksmpl.c
  • modules/samples/hooksmpl/hooksmpl.exe
    .exe windows:4 windows x86 arch:x86

    d2dc8ebef64d6798b3fb5c112ae16a49


    Headers

    Imports

    Exports

    Sections

  • modules/samples/hooksmpl/hooksmpl.o
  • modules/samples/hooksmpl/m.bat
    .bat .vbs
  • modules/samples/message.box/m.bat
    .bat .vbs
  • modules/samples/message.box/message.box
    .exe windows:4 windows x86 arch:x86

    a51bb78a19583ab07d2265aa00ce97f2


    Headers

    Imports

    Exports

    Sections

  • modules/samples/message.box/message.box.c
  • modules/samples/message.box/message.box.o
  • modules/samples/msgboxps/m.bat
    .bat .vbs
  • modules/samples/msgboxps/mem.o
  • modules/samples/msgboxps/msgboxps
  • modules/samples/msgboxps/msgboxps.c
  • modules/samples/msgboxps/msgboxps.exe
    .exe windows:4 windows x86 arch:x86

    8b6765d49bbd5b1b0fee8e607e7c7712


    Headers

    Imports

    Exports

    Sections

  • modules/samples/msgboxps/msgboxps.o
  • modules/samples/msgboxps2/m.bat
    .bat .vbs
  • modules/samples/msgboxps2/mem.o
  • modules/samples/msgboxps2/msgboxps2
  • modules/samples/msgboxps2/msgboxps2.c
  • modules/samples/msgboxps2/msgboxps2.exe
    .exe windows:4 windows x86 arch:x86

    8b6765d49bbd5b1b0fee8e607e7c7712


    Headers

    Imports

    Exports

    Sections

  • modules/samples/msgboxps2/msgboxps2.o
  • modules/samples/msgboxps3/m.bat
    .bat .vbs
  • modules/samples/msgboxps3/mem.o
  • modules/samples/msgboxps3/msgboxps3
  • modules/samples/msgboxps3/msgboxps3.c
  • modules/samples/msgboxps3/msgboxps3.exe
    .exe windows:4 windows x86 arch:x86

    aaa0e226e4cb5d40ee024ec3b11835a3


    Headers

    Imports

    Exports

    Sections

  • modules/samples/msgboxps3/msgboxps3.o
  • modules/samples/msgboxps4/m.bat
    .bat .vbs
  • modules/samples/msgboxps4/msgboxps4
  • modules/samples/msgboxps4/msgboxps4.c
  • modules/samples/msgboxps4/msgboxps4.exe
    .exe windows:4 windows x86 arch:x86

    92ee4d20a94d313666c2153827546ed4


    Headers

    Imports

    Exports

    Sections

  • modules/samples/msgboxps4/msgboxps4.o
  • modules/samples/msgboxsi/m.bat
    .bat .vbs
  • modules/samples/msgboxsi/mem.o
  • modules/samples/msgboxsi/msgboxsi
  • modules/samples/msgboxsi/msgboxsi.c
  • modules/samples/msgboxsi/msgboxsi.exe
    .exe windows:4 windows x86 arch:x86

    44921b6586476db4d7017d2071351be0


    Headers

    Imports

    Exports

    Sections

  • modules/samples/msgboxsi/msgboxsi.o
  • modules/samples/package - hook sample/convert.bat
    .bat .vbs
  • modules/samples/package - hook sample/hook
  • modules/samples/package - hook sample/hooksmpl
  • modules/samples/package - hook sample/package.hook.sample
  • modules/samples/package - hook sample/psapi
  • modules/samples/package - hook sample/sysinfo
  • modules/samples/package - message box only/convert.bat
  • modules/samples/package - message box only/message.box
  • modules/samples/package - message box only/the.easiest.package
  • modules/samples/package - process list using psapi/convert.bat
    .bat .vbs
  • modules/samples/package - process list using psapi/msgboxps3
  • modules/samples/package - process list using psapi/process.list.package
  • modules/samples/package - process list using psapi/psapi
  • modules/samples/package - process list using psapi/sysinfo
  • modules/samples/package - sample service/convert.bat
    .bat .vbs
  • modules/samples/package - sample service/sample.service
  • modules/samples/package - sample service/svc
  • modules/samples/package - sample service/svcsmpl
  • modules/samples/package - system information/convert.bat
    .bat .vbs
  • modules/samples/package - system information/message.box
    .exe windows:4 windows x86 arch:x86

    a51bb78a19583ab07d2265aa00ce97f2


    Headers

    Imports

    Exports

    Sections

  • modules/samples/package - system information/msgboxps
  • modules/samples/package - system information/msgboxps2
  • modules/samples/package - system information/msgboxps3
  • modules/samples/package - system information/msgboxsi
  • modules/samples/package - system information/package
  • modules/samples/package - system information/psapi
  • modules/samples/package - system information/sysinfo
  • modules/samples/package - using sysinfo and psapi/convert.bat
  • modules/samples/package - using sysinfo and psapi/msgboxps2
  • modules/samples/package - using sysinfo and psapi/psapi
  • modules/samples/package - using sysinfo and psapi/sysinfo
  • modules/samples/package - using sysinfo and psapi/sysinfo.psapi.usage.package
  • modules/samples/package/convert.bat
    .bat .vbs
  • modules/samples/svcsmpl/cmdline.o
  • modules/samples/svcsmpl/m.bat
    .bat .vbs
  • modules/samples/svcsmpl/svcsmpl
  • modules/samples/svcsmpl/svcsmpl.c
  • modules/samples/svcsmpl/svcsmpl.exe
    .exe windows:4 windows x86 arch:x86

    d73b3b93ab5d9aa760c0a53d26341055


    Headers

    Imports

    Exports

    Sections

  • modules/samples/svcsmpl/svcsmpl.o
  • modules/svc/linked_list.o
  • modules/svc/log.o
  • modules/svc/m.bat
    .bat .vbs
  • modules/svc/mem.o
  • modules/svc/svc
  • modules/svc/svc.c
  • modules/svc/svc.exe
    .exe windows:4 windows x86 arch:x86

    65a262e0bbac103ae65c36ab6d9a59a1


    Headers

    Imports

    Exports

    Sections

  • modules/svc/svc.h
  • modules/svc/svc.o
  • modules/sysinfo/linked_list.o
  • modules/sysinfo/m.bat
    .bat .vbs
  • modules/sysinfo/mem.o
  • modules/sysinfo/sysinfo
  • modules/sysinfo/sysinfo.c
  • modules/sysinfo/sysinfo.exe
    .exe windows:4 windows x86 arch:x86

    c8bacd1763e7714d1eaf94df7289f199


    Headers

    Imports

    Exports

    Sections

  • modules/sysinfo/sysinfo.h
  • modules/sysinfo/sysinfo.o
  • projects/Logoner/Logoner
  • projects/Logoner/Logoner.exe
    .exe windows:4 windows x86 arch:x86

    0a0496431b2cee3109340a16648db681


    Headers

    Imports

    Exports

    Sections

  • projects/Logoner/Logoner.final.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • projects/Logoner/Logoner.o
  • projects/Logoner/cmdline.o
  • projects/Logoner/convert.bat
    .bat .vbs
  • projects/Logoner/hook
  • projects/Logoner/log.o
  • projects/Logoner/logdec.c
  • projects/Logoner/logdec.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • projects/Logoner/logdec.o
  • projects/Logoner/logoner.c
  • projects/Logoner/logoner.h
  • projects/Logoner/logoner.package
  • projects/Logoner/logoner.txt
  • projects/Logoner/m.bat
    .bat .vbs
  • projects/Logoner/mdec.bat
    .bat .vbs
  • projects/Logoner/mem.o
  • projects/Logoner/mlog.bat
    .bat .vbs
  • projects/Logoner/psapi
  • projects/Logoner/svc
  • projects/Logoner/sysinfo
  • utils/converter/converter.c
  • utils/converter/converter.exe
    .exe windows:4 windows x86 arch:x86

    82c80bd041dfe88307ff6584ddaa77bb


    Headers

    Imports

    Sections

  • utils/converter/converter.o
  • utils/converter/converter.txt
  • utils/converter/m.bat
    .bat .vbs