7c901f387af4774ac1783087c79ed4e565e58a2291ef41d02f302f94d7d0eb78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c901f387af4774ac1783087c79ed4e565e58a2291ef41d02f302f94d7d0eb78
Size

813KB
MD5

0ec966976e88abb1dbd8f4f64d76f9f0
SHA1

b5c2cd3b254e0b897562bc328489ea9e046ed35e
SHA256

7c901f387af4774ac1783087c79ed4e565e58a2291ef41d02f302f94d7d0eb78
SHA512

3d82bf3ba1f28c4bcb8eba48b290216a71bf54265a6f201a2120601f95fc519ce4dd53a1dc3d1161a0c7a3ec8847a145103fcfbee10b9d521b92264a108707a3
SSDEEP

24576:HcgtwFXOhESVBoW6hR6z2qyYmoAfhEqE+SR:Hzt1ESVBoW6hR6YWoEUY

Score

N/A

Malware Config

Signatures

Files

7c901f387af4774ac1783087c79ed4e565e58a2291ef41d02f302f94d7d0eb78
.exe windows x86

ca48ed1f6a5e4ecb4bbb72303bd6328f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
GetStringTypeA
GetPrivateProfileIntW
LoadLibraryA
SetEnvironmentVariableA
HeapFree
GetVolumePathNameW
SetStdHandle
GetTickCount
SetVolumeLabelA
GetVolumeInformationW
lstrcpyA
SetCurrentDirectoryA
CreateMutexW
GetCurrentProcess
WriteConsoleA
GetShortPathNameW
CreateEventW
HeapCreate

aaclient

g_fnStartTransport
OpenKeyReader
OpenKeyReaderWriter
LoadClientAdapter

Sections

.CODE
Size: 9KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kdata
Size: 1024B - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ