accaacf8539040c927f65dabb0dce397

Sharing

Copy URL Twitter E-mail

General

Target

accaacf8539040c927f65dabb0dce397
Size

5.8MB
MD5

accaacf8539040c927f65dabb0dce397
SHA1

b9020895d761fa03c25739302cec95fd80740abc
SHA256

445a563899aed8b661ba2362bed89f4c92bcc8e22de32922217a39139f681cc6
SHA512

4ac02d0e2724b1fe1c23a3780e210410205dac56a100f12bab19b8b87504eb22e79ccf732ed5acb2323d1627fd29d27dfd9932b99827a1e417ee770795bb0999
SSDEEP

98304:CjOEp5iMUl3iPZBq2/Z73x+xl7M8AJacUWis0plXbT5GyTLsFVSwrkbOKsk:wOc0lSf1/Z73x4lM82XEhplXbTAyTYFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
accaacf8539040c927f65dabb0dce397

Files

accaacf8539040c927f65dabb0dce397
.dll windows:5 windows x86 arch:x86

eac588c68a744e9c0dc4b7b2ea66ac5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

winmm

PlaySoundW

wininet

FindFirstUrlCacheEntryW

winspool.drv

DocumentPropertiesW

comctl32

ImageList_GetImageInfo

shell32

SHGetSpecialFolderLocation

user32

DdeSetUserHandle
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW

version

GetFileVersionInfoSizeW

oleaut32

GetErrorInfo

advapi32

RegSetValueExW

netapi32

NetWkstaGetInfo

msvcrt

memcpy

winhttp

WinHttpGetIEProxyConfigForCurrentUser

kernel32

GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

shfolder

SHGetFolderPathW

wsock32

gethostbyaddr

ole32

OleRegEnumVerbs

gdi32

Pie

ntdll

RtlCompressBuffer

wtsapi32

WTSSendMessageW

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
a2H013xxXdCeKVy24
dbkFCallWrapperAddr

Sections

R<bQo.7,
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

u'7>5(Wp
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

?/Z^sKQ'
Size: - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

'0seEG)D
Size: - Virtual size: 36KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SwYc=>&p
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/9o80h?m
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/Ups>"U
Size: - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

64s6jT-
Size: - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

iq<cY:&T
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

NJ1.[v6c
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

lrf<[v0_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

@>W$f\_<
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eac588c68a744e9c0dc4b7b2ea66ac5a

Headers

File Characteristics

Imports

winmm

wininet

winspool.drv

comctl32

shell32

user32

version

oleaut32

advapi32

netapi32

msvcrt

winhttp

kernel32

shfolder

wsock32

ole32

gdi32

ntdll

wtsapi32

Exports

Exports

Sections

R<bQo.7, Size: - Virtual size: 4.5MB

u'7>5(Wp Size: - Virtual size: 10KB

?/Z^sKQ' Size: - Virtual size: 78KB

'0seEG)D Size: - Virtual size: 36KB

SwYc=>&p Size: - Virtual size: 17KB

/9o80h?m Size: - Virtual size: 3KB

/Ups>"U Size: - Virtual size: 187B

64s6jT- Size: - Virtual size: 69B

iq<cY:&T Size: - Virtual size: 2.6MB

NJ1.[v6c Size: 5.8MB - Virtual size: 5.8MB

lrf<[v0_ Size: 1KB - Virtual size: 1KB

@>W$f\_< Size: 1024B - Virtual size: 624B

R<bQo.7,
Size: - Virtual size: 4.5MB

u'7>5(Wp
Size: - Virtual size: 10KB

?/Z^sKQ'
Size: - Virtual size: 78KB

'0seEG)D
Size: - Virtual size: 36KB

SwYc=>&p
Size: - Virtual size: 17KB

/9o80h?m
Size: - Virtual size: 3KB

/Ups>"U
Size: - Virtual size: 187B

64s6jT-
Size: - Virtual size: 69B

iq<cY:&T
Size: - Virtual size: 2.6MB

NJ1.[v6c
Size: 5.8MB - Virtual size: 5.8MB

lrf<[v0_
Size: 1KB - Virtual size: 1KB

@>W$f\_<
Size: 1024B - Virtual size: 624B