ac4648dab38ddb95729156de8b03ce9e

General

Target

ac4648dab38ddb95729156de8b03ce9e
Size

194KB
MD5

ac4648dab38ddb95729156de8b03ce9e
SHA1

06262915fca1d36688b90b7a4e733616b9717d5e
SHA256

eff8530f4bfac1ebef6c2057e81e3f776be698d75e5b6682dec2fcc52bbf7d09
SHA512

fb52d1a0e56f0d1e76081a233eaab6a3e47ec0cda4743399d20cdb1cbc8df07c40a8c8e8efe40aee45191a3901ba1a8bc2b2d7d9ce4ad147ed2aa44668d52ac7
SSDEEP

3072:u7xy3p0TmYreadiAmicQNXv8NG1OHDYcc2GJaDZS53YKNpB2xVuSpZ:u7xy3QreWiuckfkG1OjYd8DZShp2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac4648dab38ddb95729156de8b03ce9e

Files

ac4648dab38ddb95729156de8b03ce9e
.exe windows:4 windows x86 arch:x86

0264bc1f1edf70d518f6ebdbc272c037

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueA
RegEnumKeyA
RegQueryInfoKeyA
GetLengthSid

user32

GetWindowRect
SetCapture
DestroyIcon
UnhookWindowsHookEx
OemToCharA
SetWindowsHookExA
UpdateWindow
CharLowerBuffA
GetActiveWindow
LoadIconA
GetTopWindow
GetDCEx
KillTimer
SetFocus
EmptyClipboard
DrawMenuBar
PeekMessageW
WaitMessage
SetClassLongA
MessageBeep
IsDialogMessageW

ole32

WriteClassStm
CoUninitialize
CoGetMalloc
CoRevokeClassObject
CoCreateFreeThreadedMarshaler
CoRegisterClassObject
CoCreateGuid

kernel32

GetACP
ExitProcess
ExitThread
GetOEMCP
GetCommandLineA
IsBadReadPtr
lstrlenA
GetProcAddress
GetModuleHandleA
GetUserDefaultLCID
VirtualAlloc
GetLastError
LoadLibraryExA
LoadLibraryA
GetCommandLineW
SetHandleCount

comctl32

ImageList_Read
ImageList_Add
ImageList_Remove
ImageList_Destroy
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor

gdi32

GetClipBox
LineTo

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0264bc1f1edf70d518f6ebdbc272c037

Headers

File Characteristics

Imports

advapi32

user32

ole32

kernel32

comctl32

gdi32

Sections

CODE Size: 37KB - Virtual size: 36KB

.rdata Size: 134KB - Virtual size: 185KB

.data Size: 10KB - Virtual size: 9KB

BSS Size: 3KB - Virtual size: 3KB

.rsrc Size: 9KB - Virtual size: 8KB

CODE
Size: 37KB - Virtual size: 36KB

.rdata
Size: 134KB - Virtual size: 185KB

.data
Size: 10KB - Virtual size: 9KB

BSS
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 9KB - Virtual size: 8KB