aacc21aeffeca462ccbc736b6f4df91a

General

Target

aacc21aeffeca462ccbc736b6f4df91a
Size

28KB
MD5

aacc21aeffeca462ccbc736b6f4df91a
SHA1

546ab4f0e6a20ba6891406564071cfc122ce3192
SHA256

a12c53fdde3ec51778d8697220b90d60d59850390b6013cb544e5fffb8cd02bd
SHA512

a5b87cf6b2f4257d2694af015560524a74c19df7924fadbf4ad8623546805d9ef9d0549b9c44f8f4cb55dd892ac783d969bde494d7a4594b44f53e86bc212e0d
SSDEEP

192:tnskwnIz4kWBtMeLyriMsVvHAkS2Vm+VPCjRf7qSvfNKlZWltziUZN0N8uNTS9H7:tnkIzhW7vLGNsW2dBCdPK2vWpro17

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aacc21aeffeca462ccbc736b6f4df91a

Files

aacc21aeffeca462ccbc736b6f4df91a
.dll windows:4 windows x86 arch:x86

ff7c7a13117e7e12b24dd0c25ed3119a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord535
ord6663
ord539
ord940
ord4278
ord939
ord537
ord941
ord2818
ord858
ord860
ord2764
ord540
ord800

msvcrt

_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
strstr
__CxxFrameHandler

kernel32

GetFileSize
CreateThread
CloseHandle
GetCurrentProcessId
GetModuleFileNameA
Sleep
ReadFile
SetFilePointer
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
OpenProcess

user32

TranslateMessage
GetMessageA
SetWindowsHookExA
CallNextHookEx
IsWindowVisible
GetClassNameA
DispatchMessageA
FindWindowExA
SendMessageTimeoutA
RegisterWindowMessageA
GetForegroundWindow
UnhookWindowsHookEx
SendMessageA

ws2_32

send
connect
htons
socket
gethostbyname
WSAStartup
recv
closesocket

ole32

CoUninitialize
CoInitialize

oleaut32

VariantClear

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARDAT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff7c7a13117e7e12b24dd0c25ed3119a

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

ws2_32

ole32

oleaut32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.SHARDAT Size: 4KB - Virtual size: 4B

.reloc Size: 4KB - Virtual size: 932B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.SHARDAT
Size: 4KB - Virtual size: 4B

.reloc
Size: 4KB - Virtual size: 932B