General
-
Target
AccGenerator.exe
-
Size
45KB
-
MD5
1d003893714bb9352f9ff8d1326a747e
-
SHA1
b50e5a1fc7d09a25d48a3e6b70885944f42f6e7b
-
SHA256
4499ad4bac40fa5651b07bf3243aa38a1e463b5ce63095a5b905c4d0bc15dc7f
-
SHA512
a05441ae4d70b7180a86c656ff5d0937a59232cda276b4d36d16b6a390cf05e3d2a8627ff6eff150a37fb2e01ec377260decb3fe7328d78175492cfaf5e7b661
-
SSDEEP
768:rdhO/poiiUcjlJInctUH9Xqk5nWEZ5SbTDaiWI7CPW5n:Zw+jjgnaUH9XqcnW85SbTrWIv
Malware Config
Extracted
xenorat
127.001.0000
AccBuilder
-
delay
20
-
install_path
temp
-
port
4444
-
startup_name
Acc_Maker
Signatures
-
Xenorat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AccGenerator.exe
Files
-
AccGenerator.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ