Adоbe_Activator[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Adоbe_Activator.exe
Size

358KB
MD5

359a8beba70783ec2e1838985018f5ec
SHA1

c989f3993c391676448d0e2c8aba81ce9a8276b6
SHA256

ab366ea9c7cf15bb24305716cedcdf490ef0b3e46f5ca249ebb0b7261b25e571
SHA512

612affaa51c03760e18f0001e0f7c72eaf335d23570f4965b817c1bcc1699a911d7266af7f9397f5bda2f0d5cd34af2bd7d5af8fe81511f0ba0a06c61b5bebb3
SSDEEP

6144:U0zGvKB9d3JewEfth2Z7swehrA8/l9PzuBBLVhOeSAOvGtSTE1:UPCb3REVh2Zdkrp9CueS0oE1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Adоbe_Activator.exe

Files

Adоbe_Activator.exe
.exe windows:6 windows x86 arch:x86

647bc1f32f5206c42844fc594ea13105

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\удача\Desktop\StubClear#2\Release\BigProject.pdb

Imports

kernel32

SetStdHandle
GetProcessHeap
HeapSize
CreateFileW
LoadLibraryA
GetProcAddress
FreeLibrary
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
WideCharToMultiByte
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
HeapFree
HeapAlloc
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW

user32

ReleaseDC
FillRect
GetDC

gdi32

CreateCompatibleBitmap
TextOutW
MoveToEx
SetTextColor
SetROP2
SetBkColor
SelectObject
LineTo
GetCurrentPositionEx
DeleteObject
CreateSolidBrush
CreatePen
CreateFontW

ole32

CoUninitialize
CoInitialize

oleaut32

VariantClear
VariantInit
SafeArrayCreateVector
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
SafeArrayCreate

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

647bc1f32f5206c42844fc594ea13105

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

ole32

oleaut32

Sections

.text Size: 284KB - Virtual size: 283KB

.rdata Size: 61KB - Virtual size: 60KB

.data Size: 4KB - Virtual size: 7KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 284KB - Virtual size: 283KB

.rdata
Size: 61KB - Virtual size: 60KB

.data
Size: 4KB - Virtual size: 7KB

.reloc
Size: 8KB - Virtual size: 8KB