14aad057ce2c3ab5fd09b43d988c0054d5758d04c15f66463c03815382e01db3

Sharing

Copy URL Twitter E-mail

General

Target

14aad057ce2c3ab5fd09b43d988c0054d5758d04c15f66463c03815382e01db3
Size

6.2MB
MD5

296067ab3cb52518edc49955a71a9f6f
SHA1

2e8892a23a4b1e8c8e3a516dc7df3b09d24d4492
SHA256

14aad057ce2c3ab5fd09b43d988c0054d5758d04c15f66463c03815382e01db3
SHA512

b0999b84be3605a18b758d94eeeef96afd3eec1aa5ba521c2a91a77c88568edfa742c2ab5ee114fe2adc9506dd6856456662bcb99f6c75d6b8291557e9c139bc
SSDEEP

98304:fnRSjaUPKl6h7BNTozwyHdpeo3pam1nF:fMjfPh7gpt5am1nF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14aad057ce2c3ab5fd09b43d988c0054d5758d04c15f66463c03815382e01db3

Files

14aad057ce2c3ab5fd09b43d988c0054d5758d04c15f66463c03815382e01db3
.exe windows:6 windows x86 arch:x86

e74a0ac1738b72e9c60b3e47320692a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libeay32

BIO_ctrl
BIO_free_all
BIO_new
BIO_new_mem_buf
BIO_s_mem
CRYPTO_cleanup_all_ex_data
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_write_bio_RSAPrivateKey
PEM_write_bio_RSAPublicKey
RAND_pseudo_bytes
RSA_check_key
RSA_free
RSA_generate_key
RSA_private_encrypt
RSA_public_decrypt

libgcc_s_dw2-1

__deregister_frame_info
__register_frame_info

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileA
CreateFileW
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
PostQueuedCompletionStatus
QueryPerformanceCounter
ReadFile
ResumeThread
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
WriteFile

msvcrt

__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_beginthread
_cexit
_errno
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
mbstowcs
memcpy
signal
strlen
strncmp
time
toupper
vfprintf
wcslen
wcsrchr
wcstombs

actfun

act_eaoCode2Num
act_eaoNum2Code
act_eaoTest
act_new
act_delete
act_setLicense
act_setActcode
act_getLicense
act_getActcode
act_getHardCode
act_onlineActive
act_checkHardCode
act_syncServerRemainingTime
act_initV0
act_getRemain

Exports

Exports

_cgo_dummy_export

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 194KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e74a0ac1738b72e9c60b3e47320692a2

Headers

DLL Characteristics

File Characteristics

Imports

libeay32

libgcc_s_dw2-1

kernel32

msvcrt

actfun

Exports

Exports

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.data Size: 226KB - Virtual size: 225KB

.rdata Size: 2.8MB - Virtual size: 2.8MB

.eh_fram Size: 5KB - Virtual size: 4KB

.bss Size: - Virtual size: 194KB

.edata Size: 512B - Virtual size: 78B

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 137KB - Virtual size: 136KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 226KB - Virtual size: 225KB

.rdata
Size: 2.8MB - Virtual size: 2.8MB

.eh_fram
Size: 5KB - Virtual size: 4KB

.bss
Size: - Virtual size: 194KB

.edata
Size: 512B - Virtual size: 78B

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 137KB - Virtual size: 136KB