actoolkit[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

actoolkit.zip
Size

478KB
MD5

34879687f77682e7bfa1bb7e0cdc4546
SHA1

165492643d53481daa2d85195b603886b8f2919c
SHA256

f24ad44f55334a2e9bc05de49adbc68f66404c48b61bc9d89cf17bd8e996b4d1
SHA512

731a61d80d7edc5b587f8d2539bc4eac3f85f2ad35e162d9d88d5c544c6578a922586e0561edae11e3d457f4a8a0780b0b1a2f2e3857ed53bdd21905bd09094c
SSDEEP

12288:8T5wcOkML9JBprN/tXrHDJPDyO72MZZMR:8T5wcOkqPtDDJWo2JR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ACToolkit.exe

Files

actoolkit.zip
.zip
ACToolkit.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 422KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
readme.txt
rvforest.dat