ac9be251177e49861755f60443d95a7a | Triage

Sharing

General

Target

ac9be251177e49861755f60443d95a7a
Size

359KB
MD5

ac9be251177e49861755f60443d95a7a
SHA1

05c259afde3209733c54cd7ab074664a634561bf
SHA256

6267ea98efa0a23aa7b6edaf53cec7297260e6e8890e3d32ac055ca8224732e4
SHA512

15a18959e53fcda63a6a79ec19ab114a5279016480705b6f5f294e233c24a7875fd301a4d6634a389cc9b07d15645dcb24c02015385408e59df5fdf1a623f744
SSDEEP

6144:DvsNvDQ18qO4ULos1fQD6WxNTuUrNc3aqIlL6pJs4MvxXBCoeKF1V9TInA:jsN7+O4ULosmDNxNTxNcq36M4wxX5eKL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac9be251177e49861755f60443d95a7a

Files

ac9be251177e49861755f60443d95a7a
.exe windows:4 windows x86 arch:x86

1a95e125fc87991596298e6637676113

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FindFirstFileW
CopyFileW
EnumCalendarInfoExA
FindNextFileW
SetFileAttributesW
MoveFileW
FindClose
SetLastError
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
FormatMessageW
GetTickCount
CreateEventW
CreateThread
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
ResetEvent
SetEvent
GetFileAttributesExW
ReleaseMutex
WaitForMultipleObjects
CreateMutexW
CloseHandle
WaitForSingleObject
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
LocalAlloc
LocalFree
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedExchange

oleaut32

VARIANT_UserFree
SafeArrayCreateEx
VarDateFromI4
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen

msvfw32

ICInfo

Sections

.text
Size: 247KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE