ac87102e874b9cb6d628a25271a128b296dc1ca828598d5602dea8b5d5b49956

Sharing

Copy URL

Twitter E-mail

General

Target

ac87102e874b9cb6d628a25271a128b296dc1ca828598d5602dea8b5d5b49956
Size

612KB
MD5

12ef2e90cb6f1b7a8b9b735f4973044f
SHA1

fa6c547a9f31d902ef3c0f3f2e8e2cd42b07ab4a
SHA256

ac87102e874b9cb6d628a25271a128b296dc1ca828598d5602dea8b5d5b49956
SHA512

f6ac3aa955957a60b56604ad177372d67a6272c0c7c77eef5c84cb2908e75c2a5e3cb2eecd3decc47d63504a07aa907f2d9448edae3006d49a5ad453559cfd4a
SSDEEP

12288:qGJPkmvqGPnrpuFAQZfWZvY2tC0ewff6faysGn61N:RFkmLfKtMvsgfYabxf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac87102e874b9cb6d628a25271a128b296dc1ca828598d5602dea8b5d5b49956

Files

ac87102e874b9cb6d628a25271a128b296dc1ca828598d5602dea8b5d5b49956
.exe windows:4 windows x86 arch:x86

2fe8205c5e73abbee67663f2eaca9756

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
GetClientRect
DispatchMessageA
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
PostMessageA
SetScrollInfo
SetWindowTextA
SetMenuItemInfoA
ReleaseCapture
LoadStringA
InsertMenuItemA
CharUpperA
RegisterWindowMessageA
ScrollWindow
GetCapture
ShowCursor
CreateCursor
DragDetect
DestroyCursor
SetPropA
AppendMenuA
GetPropA
CreateAcceleratorTableA
RemovePropA
CreateDialogIndirectParamA
FindWindowA
GetMenu
TranslateAcceleratorA

kernel32

VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapSize
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
EnterCriticalSection
CreateDirectoryA
Sleep
GetCurrentProcess
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetTickCount
UnhandledExceptionFilter
LeaveCriticalSection
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree

gdi32

CreatePen
CreateFontIndirectA
DeleteObject
GetStockObject

shell32

CommandLineToArgvW

Sections

.text
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fe8205c5e73abbee67663f2eaca9756

Headers

File Characteristics

Imports

user32

kernel32

gdi32

shell32

Sections

.text Size: 504KB - Virtual size: 503KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 44KB - Virtual size: 46KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 504KB - Virtual size: 503KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 44KB - Virtual size: 46KB

.rsrc
Size: 10KB - Virtual size: 10KB