ac1d93b9ff9e86e0bed016731244e1d6

Sharing

Copy URL Twitter E-mail

General

Target

ac1d93b9ff9e86e0bed016731244e1d6
Size

28KB
MD5

ac1d93b9ff9e86e0bed016731244e1d6
SHA1

89a3dd2ec4c6c1c55f6688a0b27ddb11bb86cc81
SHA256

ee7056af9fb13c32bf8e9e839814fe4e2f4723402d77717daf4774ccb61df388
SHA512

6158d80d5c15c636ea5b8ee7268d6fe6ed488bc9ecd0d6c4e8a0e72f00ac1afb7e46edfb28abebdc4ffbe28be13c65b8f3f66ececb3e601838bf4604066221f1
SSDEEP

768:nfrIJiDYgjrLnN5UK3wmldMAScPD5kz/LD:nfrKqTjzUK3wwSJLD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1d93b9ff9e86e0bed016731244e1d6

Files

ac1d93b9ff9e86e0bed016731244e1d6
.dll windows:4 windows x86 arch:x86

c9610ebb4f2c4e7f1aa1f0db17185780

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetThreadPriority
GetPrivateProfileStringA
GetModuleHandleA
Thread32Next
GetThreadPriority
OpenThread
Thread32First
CreateToolhelp32Snapshot
WideCharToMultiByte
MultiByteToWideChar
TerminateProcess
ReadProcessMemory
CreateProcessA
GetModuleFileNameA
VirtualAlloc
GetProcAddress
LoadLibraryA
ExitProcess
CreateFileA
GetSystemDirectoryA
VirtualProtectEx
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualProtect
ReadFile
SetFilePointer
WriteFile
DeleteFileA
WriteProcessMemory
CloseHandle
GetCurrentProcessId
CreateMutexA
GetLastError
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
GetCurrentThreadId
CreateThread

user32

GetForegroundWindow
CallNextHookEx
GetWindowTextA
FindWindowA
GetWindowThreadProcessId
UnhookWindowsHookEx
SetWindowsHookExA

wininet

InternetCloseHandle
InternetReadFile

msvcrt

strcmp
wcslen
_stricmp
_strlwr
_strupr
_strcmpi
fopen
fread
fclose
strstr
??2@YAPAXI@Z
memcpy
strrchr
memset
strcat
sprintf
strcpy
strlen
atoi
??3@YAXPAX@Z
strncpy
strchr

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9610ebb4f2c4e7f1aa1f0db17185780

Headers

File Characteristics

Imports

kernel32

user32

wininet

msvcrt

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 14KB

sdt Size: 512B - Virtual size: 4B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 14KB

sdt
Size: 512B - Virtual size: 4B

.reloc
Size: 3KB - Virtual size: 2KB