6ac8e56d8bb8fc12544ca3f7bb8335318da8d84081ac8c50d6b367de6857255a

Sharing

Copy URL Twitter E-mail

General

Target

6ac8e56d8bb8fc12544ca3f7bb8335318da8d84081ac8c50d6b367de6857255a
Size

6.3MB
MD5

a27913c04c16c7ee7112cc6cadda8a22
SHA1

302c9372213e7fdd9f476b17df0e34691ad4ae4a
SHA256

6ac8e56d8bb8fc12544ca3f7bb8335318da8d84081ac8c50d6b367de6857255a
SHA512

3e6d9edd03c89e45e24a1547c8aff42ba46e15c9bf586ce29081aabaa94b846d6a28000286716c861a31ef300cd73d4d0a39a4b1d9fcfb50514b685917cece6e
SSDEEP

196608:yQm7uH5oaVopifRWMS5RqUXFFG1eROcH:ynHaeMRc5Rq3cR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ac8e56d8bb8fc12544ca3f7bb8335318da8d84081ac8c50d6b367de6857255a

Files

6ac8e56d8bb8fc12544ca3f7bb8335318da8d84081ac8c50d6b367de6857255a
.exe windows:6 windows x64 arch:x64

133468016d2a989be1d503f2a763c24f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle

gdi32

BitBlt

kernel32

AddVectoredExceptionHandler
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcrt

___lc_codepage_func

user32

ActivateKeyboardLayout
CharUpperBuffW

wtsapi32

WTSSendMessageW

Exports

Exports

_cgo_dummy_export
goELEMENT_COMPARATOR
goElementEventProc
goKeyValueCallback
goLPCBYTE_RECEIVER
goLPCSTR_RECEIVER
goLPCWSTR_RECEIVER
goNATIVE_FUNCTOR_INVOKE
goNATIVE_FUNCTOR_RELEASE
goSciterElementCallback
goSciterHostCallback
go_send
hook_create_screen_info
hook_get_auto_repeat_delay
hook_get_auto_repeat_rate
hook_get_multi_click_time
hook_get_pointer_acceleration_multiplier
hook_get_pointer_acceleration_threshold
hook_get_pointer_sensitivity
hook_post_event
hook_run
hook_set_dispatch_proc
hook_set_logger
hook_stop

Sections

.text
Size: - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 606KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 443KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

133468016d2a989be1d503f2a763c24f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

user32

wtsapi32

Exports

Exports

Sections

.text Size: - Virtual size: 4.6MB

.data Size: - Virtual size: 606KB

.rdata Size: - Virtual size: 4.5MB

.pdata Size: - Virtual size: 14KB

.xdata Size: - Virtual size: 13KB

.bss Size: - Virtual size: 443KB

.edata Size: - Virtual size: 812B

.idata Size: - Virtual size: 7KB

.CRT Size: - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

.vmp0 Size: - Virtual size: 3.0MB

.vmp1 Size: 6.3MB - Virtual size: 6.3MB

.reloc Size: 512B - Virtual size: 36B

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: - Virtual size: 4.6MB

.data
Size: - Virtual size: 606KB

.rdata
Size: - Virtual size: 4.5MB

.pdata
Size: - Virtual size: 14KB

.xdata
Size: - Virtual size: 13KB

.bss
Size: - Virtual size: 443KB

.edata
Size: - Virtual size: 812B

.idata
Size: - Virtual size: 7KB

.CRT
Size: - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

.vmp0
Size: - Virtual size: 3.0MB

.vmp1
Size: 6.3MB - Virtual size: 6.3MB

.reloc
Size: 512B - Virtual size: 36B

.rsrc
Size: 15KB - Virtual size: 15KB