ac8de0360d7638ac31bd99646f3e4ef6

General

Target

ac8de0360d7638ac31bd99646f3e4ef6
Size

140KB
MD5

ac8de0360d7638ac31bd99646f3e4ef6
SHA1

0376b086d008b782e90d2917ecab1160e39b3166
SHA256

dd3bc89b446c76a4413323d708ebfe70462915a73db177693673fc8f6d6a2a4c
SHA512

6619d26ef01870bd2edbd578b20fde71e6d6204e730effb60618b6cb406532f0043a7ca41999ff7a49c63f1f8c80432d167867a475ce3c5334677fd7b881f201
SSDEEP

3072:H1yOU47KUPDyLQsbwdcyVTp34BwlO2eK:Qs7PPWLix5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac8de0360d7638ac31bd99646f3e4ef6

Files

ac8de0360d7638ac31bd99646f3e4ef6
.dll windows:4 windows x86 arch:x86

12a4775a58e544880d48ae26001371c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
RegCloseKey

kernel32

CloseHandle
CreateFileA
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
GetCommandLineA
GetEnvironmentStringsA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile

ole32

CoInitialize
CoUninitialize

oleaut32

SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

\drake04\ft\layout

LAYOUT
SCRNEXIST
CITYSTATEZIP
CHKDGT
OVERRIDE

\drake04\ft\daycount

DAYCOUNT
ADJMONTH

\drake04\ft\fileio

SETSTATEREFERENCE

Exports

Exports

ORC1

Sections

.text
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12a4775a58e544880d48ae26001371c1

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

\drake04\ft\layout

\drake04\ft\daycount

\drake04\ft\fileio

Exports

Exports

Sections

.text Size: 129KB - Virtual size: 128KB

.data Size: 4KB - Virtual size: 5KB

.link Size: 2KB - Virtual size: 1KB

.rloc Size: 4KB - Virtual size: 4KB

.text
Size: 129KB - Virtual size: 128KB

.data
Size: 4KB - Virtual size: 5KB

.link
Size: 2KB - Virtual size: 1KB

.rloc
Size: 4KB - Virtual size: 4KB