ac935dfe8e98757b0e4c4aedfe501ffc

Sharing

Copy URL Twitter E-mail

General

Target

ac935dfe8e98757b0e4c4aedfe501ffc
Size

125KB
MD5

ac935dfe8e98757b0e4c4aedfe501ffc
SHA1

a9c2887f026b728c5a08877375ad96661a75cd29
SHA256

b411aa7012bcc78a30ce7c29adb8ecb5f169f482f2eea24ac74cf538ddb0e4ef
SHA512

165fba46c2cd0b0bda51b2fede0d235e37ac257337bbb37e28351638e3e4907e9b390fd010814a2e0e7b5e024eacccf6b11d6c7312542966572686bc387d43c5
SSDEEP

3072:u2iKOX9MsfizxpPLF7FKF5WLgpS583MYD7ZPx:u2iK6MsCKFAgU5EJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac935dfe8e98757b0e4c4aedfe501ffc

Files

ac935dfe8e98757b0e4c4aedfe501ffc
.dll windows:1 windows x86 arch:x86

ca613469833ff8a0efd2b2308e2a85f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalHandle
OpenFile
GlobalReAlloc
GetDiskFreeSpaceA
_lwrite
_lread
LeaveCriticalSection
IsBadReadPtr
EnterCriticalSection
_llseek
ReadProcessMemory
GetLastError
_lclose
GetFileSize
GetFileTime
GetFileInformationByHandle
InterlockedIncrement
OpenProcess
GetCurrentProcessId
InterlockedDecrement
InitializeCriticalSection
DeleteFileA
lstrlenA
GetPrivateProfileStringA
ExitProcess
GlobalUnlock
GlobalFree
GlobalAlloc
GetCurrentDirectoryA
WriteProcessMemory
SetFilePointer
GetEnvironmentStrings
GetLocalTime
WriteFile
GetStartupInfoA
GetFileType
GetStdHandle
GetModuleFileNameA
VirtualAlloc
GetCommandLineA
GlobalLock
GetVersion
GetOEMCP
CloseHandle
FlushFileBuffers
GetCPInfo
DeleteCriticalSection
TlsGetValue
TlsFree
TlsSetValue
SetStdHandle
SetEnvironmentVariableA
SetCurrentDirectoryA
GetTimeZoneInformation
VirtualFree
GetACP
GetCurrentThreadId
TlsAlloc
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

GetFocus
MessageBeep
MessageBoxA
GetActiveWindow
PostMessageA
RegisterWindowMessageA
RemovePropA
wsprintfA
GetPropA
GetDlgItemTextA
CreateDialogParamA
DestroyWindow
SendMessageA
EndDialog
SetDlgItemTextA
SendDlgItemMessageA
SetPropA
SetWindowTextA
DialogBoxParamA

comdlg32

GetOpenFileNameA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA

ole32

CoFileTimeToDosDateTime

Exports

Exports

ADSBlockRead
ADSBlockWrite
ADSCopyFile
ADSDataToLPSTR
ADSDeleteFile
ADSFileSplit
ADSGetCurDir
ADSGetFAttr
ADSGetFTime
ADSMemoryRead
ADSMemoryWrite
ADSSelect
ADS_decrypt
ADS_encrypt
Add2Header
AddASCIIRecord
AddRecord
AddRecordDisk
AddRecordMem
AddRecordStaticMem
AddTable2Header
AllClientDone
AppendFile
BaseSize
BatchBaseDelete
BatchBaseImport
BatchDelete
BatchImport
BufField
BufFieldByPos
BufFieldNP
CalculateSize
CallExportASCII
CallImportASCII
CheckBase
ClientDone
CloseBase
CloseCursor
CloseCursorTables
CloseMBase
CloseTable
CloseTableDisk
CloseTableMem
CloseTableStaticMem
CmpNbRecords
CmpRecords
ConvertASCII2ADSRecord
CountStrList
CountToken
CreateBase
CreateMBase
CreateTTs
CreateTable
DeallocateStaticMemTable
DefineBase
DefineTTs
DefineTable
DeleteASCIIInADSFile
DeleteASCIIInADSTable
DeleteASCIIInTable
DeleteASCIIRecord
DeleteBase
DeleteBaseDb
DeleteInHeader
DeleteMBase
DeleteRecord
DeleteRecordDisk
DeleteRecordMem
DeleteRecordStaticMem
DoMBase
Exists
ExportBase2ASCII
ExportTable2ASCII
ExportTable2ASCIIFile
ExtractFile
ExtractHeader
ExtractOrgFile
FindInHeader
FindTableCursor
GetDataType
GetField
GetFieldPos
GetFieldStaticMem
GetFldName
GetFldPos
GetNbRecs
GetRecord
GetRecordDisk
GetRecordMem
GetRecordStaticMem
GetSystemTable
GetTable
GetTableGrowth
GetTableIdx
GetTableInfo
GetTableInfoIdx
GetTableList
GetTableOfClients
GetTableRecord
GetTbClient
GetTmpBuffSize
GetToken
GetType
GetTypeSize
GetValue
GetVarType
GetXREFChk
Import2Header
ImportASCII2ADSFile
ImportASCII2ADSTable
ImportASCII2Base
ImportASCII2Table
InsRecordDisk
InsRecordDynamicMem
InsRecordMem
InsRecordStaticMem
InsertRecordStaticMem
IsBaseModified
IsMFPFile
IsTableInBase
LPSTRToADSData
MBFOpenAll
MBFWriteAllInOne
MFPHeadSize
MFPOpenHeader
Min
MinI
Modified
NewTable
New_MFP
OpenBase
OpenMBFHeader
OpenMBase
OpenMBaseTable
OpenTable
OpenTableDisk
OpenTableMem
OpenTableStaticMem
PtrAdd
ReadCompiledFileStaticMem
ReadLn
ReadTableData
ReadTableHeader
Register_Runtime
RenameTable
RenameTableFile
ResetBase
ResetTable
ResizeTable
SaveASMBase
SaveAsBase
SaveBase
SaveBase2Tables
SaveMBase
SaveTable
SaveTableDisk
SearchKey
SearchRecord
SearchSystemTT
SetBaseModified
SetField
SetFieldStaticMem
SetRecord
SetRecordDisk
SetRecordMem
SetRecordStaticMem
SetSortFlags
SetTableGrowth
SetTableType
SetValue
SortBase
SortDynamicTable
SortMBase
SortRecords
SortStaticTable
SortTable
TableDelete
TableExist2
TableExists
TbAddRecord
TbCloseTable
TbCmpRecords
TbDeleteRecord
TbGetASCIIRecord
TbGetASCIITableFLdNames
TbGetCursor
TbGetField
TbGetFieldAddress
TbGetNbRecs
TbGetRecBuffValue
TbGetRecord
TbGetRecordAddress
TbGetValue
TbGetXREFChk
TbInsRecord
TbIsDuplicateRecord
TbOpenTable
TbResetTable
TbSaveTable
TbSearchKey
TbSearchRef
TbSetField
TbSetRecBuffValue
TbSetRecord
TbSetSortFlags
TbSetValue
TbSetXREFChk
TbTableSize
TbfHeaderSize
UpDateMBase
UpperCase
WriteCompiledFileStaticMem
WriteHeader
WriteTableData
WriteTableHeader
_DefineTable
_Exists
_NewStr
_SearchFirst
_SearchFirstRef
_TbGetNextASCIIRecord
_TbGetNextRecord
_TbGetNextRecordAddress
_TbRecordToASCII
_fsize
_sqSearchKey
_sqSearchRecord
_sqSearchRef
_stSearchInsPos
_stSearchKey
_stSearchRef
bLogicalFields
bOperatorTest
fOpenTable
fWriteHeader
fWriteTable
sstrcmp
strPas
strpCopy
tMemCmp

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pckdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca613469833ff8a0efd2b2308e2a85f2

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 96KB

.bss Size: - Virtual size: 6KB

.rdata Size: 512B - Virtual size: 161B

.data Size: 10KB - Virtual size: 10KB

.idata Size: 2KB - Virtual size: 2KB

.pckdata Size: 512B - Virtual size: 4B

.edata Size: 6KB - Virtual size: 5KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 96KB - Virtual size: 96KB

.bss
Size: - Virtual size: 6KB

.rdata
Size: 512B - Virtual size: 161B

.data
Size: 10KB - Virtual size: 10KB

.idata
Size: 2KB - Virtual size: 2KB

.pckdata
Size: 512B - Virtual size: 4B

.edata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 4KB