aca5ae80967429bb6c8a42a090872d3a

General

Target

aca5ae80967429bb6c8a42a090872d3a
Size

24KB
MD5

aca5ae80967429bb6c8a42a090872d3a
SHA1

0667023f1da551f647955a43ecb92c7b89370af2
SHA256

1f7190a6ac03bdf898efdb8dffd9885fa369749e866e032d92ce98446cce3b73
SHA512

8794f121ffb21615a8631f4eee756dfc116413ab2c09cb6dc6de59fd533cdfab2390741c45c8e644702a96cb3e2e6babb576e8a5402100882983250ed256b928
SSDEEP

192:rZ1YRIJhcjqwF3BXqtNTnxfLnjePUuJi/zh5oA+zaVoQUkLnc7bCMceNO4aocnE:F1HhDKkTnZLnqPURh3bVyHeMvs7nE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca5ae80967429bb6c8a42a090872d3a

Files

aca5ae80967429bb6c8a42a090872d3a
.dll windows:4 windows x86 arch:x86

74f6ed26f27661d448b7476880008ce1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
ReleaseMutex
GetLastError
CreateMutexA
OpenProcess
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
LoadLibraryA
WriteProcessMemory
VirtualAllocEx
FindClose
FindNextFileA
lstrcpynA
lstrcmpA
FindFirstFileA
VirtualProtectEx
GetSystemDirectoryA
Module32Next
Module32First
ReadFile
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
CreateFileA
lstrcpyA
lstrlenA
IsBadStringPtrA
CreateThread
CloseHandle
Sleep
GetCurrentProcessId

user32

GetForegroundWindow
wsprintfA
GetWindowThreadProcessId
EnumWindows
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetWindowTextA

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

shlwapi

StrStrIA

msvcrt

strcmp
_purecall
memset
strcpy
isprint
strstr
memcpy
memcmp
??3@YAXPAX@Z
??2@YAPAXI@Z

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.bss
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74f6ed26f27661d448b7476880008ce1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

wininet

Sections

.bss Size: - Virtual size: 2.0MB

.data Size: 9KB - Virtual size: 8KB

.shared Size: 1024B - Virtual size: 532B

.reloc Size: 6KB - Virtual size: 6KB

.bss
Size: - Virtual size: 2.0MB

.data
Size: 9KB - Virtual size: 8KB

.shared
Size: 1024B - Virtual size: 532B

.reloc
Size: 6KB - Virtual size: 6KB