678279786aaa769527b316acda03a2ef80fdbcdade2592fc1cab613d7d4838d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

678279786aaa769527b316acda03a2ef80fdbcdade2592fc1cab613d7d4838d7
Size

830KB
MD5

b36173cede4315c62c254eb7ae846e41
SHA1

1b74e53605455f7904de138f0099c8e85438c3a2
SHA256

678279786aaa769527b316acda03a2ef80fdbcdade2592fc1cab613d7d4838d7
SHA512

ab449fde8e2fc5fc8bc0158fb05213ee43a4117a80b2164c569d02e54d30663c9226fd551309e9746a8f9df0950df478190ff046b91f053cbfed4a8daab7ebcd
SSDEEP

24576:cIl975tLOHM6sZv42gmIh+OsX8yC62IT/:cQrtqHU54nh+X8X6LT/

Score

N/A

Malware Config

Signatures

Files

678279786aaa769527b316acda03a2ef80fdbcdade2592fc1cab613d7d4838d7
.exe windows x86

9d4feb473599a5aab11f3bf2ea6f4ece

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteConsoleW
HeapCreate
LoadLibraryA
SetEnvironmentVariableA
GetVolumeInformationW
GetVolumePathNameA
HeapFree
OpenEventW
GetShortPathNameW
CreateEventA
lstrcatW
CreateMutexW
SetVolumeLabelA
GetPrivateProfileIntW
SetStdHandle
GetTickCount
GetStringTypeA
lstrcpyA
GetCurrentProcess

aaclient

g_fnStartTransport
OpenKeyReader
LoadClientAdapter
OpenKeyReaderWriter

Sections

.text
Size: 23KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ