acc231060381c932139981648ddd4660ebf214c433fcd11e0470e3d5951c9a20[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

acc231060381c932139981648ddd4660ebf214c433fcd11e0470e3d5951c9a20.exe
Size

486KB
MD5

2f15561e3782827302359028146b300e
SHA1

5eef662e78822d06e258669d231006e7d836c0c2
SHA256

acc231060381c932139981648ddd4660ebf214c433fcd11e0470e3d5951c9a20
SHA512

2d5f3f5331b33b5abdf0966ced58b89dc15a92f6fb2e62c9573512913cbe5a35ea28be6ccc4de12ffaf4f1ca4130fd752301516b2f4e3a06c9fb6f4250be4de7
SSDEEP

12288:RAJfG7BG7Ihl4RoyJqTf3gZhA+BAmAuCwPK91X8U8tnxX:Rn07IY6yJqb3gf5tCP1MU8bX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acc231060381c932139981648ddd4660ebf214c433fcd11e0470e3d5951c9a20.exe

Files

acc231060381c932139981648ddd4660ebf214c433fcd11e0470e3d5951c9a20.exe
.exe windows:4 windows x86 arch:x86

82e20d7263ea26bdcc1f734f296cded5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
GetModuleHandleA
MultiByteToWideChar
lstrlenA
LocalFree
WriteConsoleW
GetStdHandle
FormatMessageW
GetLastError
CloseHandle
WaitForMultipleObjects
CreateThread
lstrcmpW
lstrcatW
lstrlenW
lstrcmpiW
GetConsoleOutputCP
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

LoadCursorW
LoadCursorFromFileW
DestroyIcon
IsCharUpperW
ReleaseDC
GetClassNameA
DdeInitializeW
EnumChildWindows
MenuItemFromPoint
PostMessageA
GetAltTabInfoA
GetPropA
IsCharAlphaNumericW
PeekMessageA
GetFocus
EmptyClipboard
SwitchToThisWindow
RegisterWindowMessageW
SendMessageCallbackW
SetWindowsHookA
SetMenuItemBitmaps
DdeCreateStringHandleA
GetKeyboardLayoutNameW
GetMenuStringA
UnregisterDeviceNotification
SetWindowTextA
IsHungAppWindow
SetScrollPos
IsDialogMessage
DialogBoxParamA
DrawCaption
RealGetWindowClassW
EndMenu
wvsprintfW
DdeClientTransaction
EnumClipboardFormats
DdeKeepStringHandle
SetThreadDesktop
PackDDElParam
VkKeyScanW
EndTask
GetMenuItemCount
DeregisterShellHookWindow
CreateIcon

gdi32

GetStockObject
GetEnhMetaFileBits
TranslateCharsetInfo
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetTextColor
SetStretchBltMode
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetRgnBox
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetDeviceCaps
GetDIBits
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePen
CreatePalette
CreateFontIndirectW
CreateFontA
CreateFontW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
BitBlt

comdlg32

PrintDlgW
GetSaveFileNameA
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueExA
SetSecurityDescriptorDacl
ReportEventW
RegisterEventSourceW
RegUnLoadKeyW
RegSetValueExA
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExA
RegOpenKeyExW
RegLoadKeyW
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupAccountSidA
LookupAccountSidW
InitializeSecurityDescriptor
GetUserNameA
GetTokenInformation
GetLengthSid
FreeSid
AllocateAndInitializeSid
GetUserNameW
GetKernelObjectSecurity
StartServiceA
StartServiceW
QueryServiceStatus
OpenServiceA
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
CryptSetProvParam
CryptGetProvParam
CryptDestroyHash
CryptSignHashA
CryptSetHashParam
CryptCreateHash
CryptImportKey
CryptExportKey
CryptReleaseContext
CryptDestroyKey
CryptGetUserKey
CryptAcquireContextA
CryptDecrypt

shell32

ExtractIconEx
ExtractAssociatedIconExW
Shell_NotifyIcon
SHChangeNotify
ExtractIconA
ShellExecuteEx
WOWShellExecute
DoEnvironmentSubstW
SHGetFileInfo
ExtractIconExW
SHAddToRecentDocs
SHPathPrepareForWriteW
ShellExecuteExA
Shell_NotifyIconW

ole32

CreateStreamOnHGlobal
OleUninitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
GetHGlobalFromStream
CoCreateGuid

shlwapi

StrRStrIA
StrRChrW

comctl32

ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17

Sections

.text
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82e20d7263ea26bdcc1f734f296cded5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

comctl32

Sections

.text Size: 281KB - Virtual size: 281KB

.rdata Size: 512B - Virtual size: 266B

.data2 Size: 20KB - Virtual size: 19KB

.data Size: 28KB - Virtual size: 28KB

.rsrc Size: 154KB - Virtual size: 154KB

.text
Size: 281KB - Virtual size: 281KB

.rdata
Size: 512B - Virtual size: 266B

.data2
Size: 20KB - Virtual size: 19KB

.data
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 154KB - Virtual size: 154KB