ab0170be877014cf737d9dc8ff93913655996f83114ce8295e07d879d962d43b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab0170be877014cf737d9dc8ff93913655996f83114ce8295e07d879d962d43b
Size

65KB
MD5

6eed0f3a06d671cf3b2b86b53ef0a8c2
SHA1

ba0ef89e69727d8771322e1adfebf64914bdb9f1
SHA256

ab0170be877014cf737d9dc8ff93913655996f83114ce8295e07d879d962d43b
SHA512

0ce2c59624820cd5b3964657f1c3f57cfab0e770b51a24b052c774be7562bf8a12cc9f1a71052cbc9e6d08f309a7b38fb9eb11fe9dd129e7f51c5c162fd3d96f
SSDEEP

1536:8qRIT9vSPHlvl/6/HMtM9ws0sYlI6tpMunycaj1ib:8KccH/CHuTrsYlR4unmj1i

Score

N/A

Malware Config

Signatures

Files

ab0170be877014cf737d9dc8ff93913655996f83114ce8295e07d879d962d43b
.exe windows x86

f508196fc847a8d4ed33e9b2ea256d07

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
FoldStringA
GetStringTypeA
GetPrivateProfileIntW
EnterCriticalSection
SetCurrentDirectoryA
GetCurrentProcess
SetStdHandle
GetProcessVersion
CreateMutexW
GetShortPathNameW
SetVolumeLabelA
LoadLibraryA
GetConsoleTitleA
HeapCreate
DeleteFileA
GetTickCount
lstrcpyW
SetEnvironmentVariableA

aaclient

OpenKeyReader
g_fnStartTransport
OpenKeyReaderWriter
LoadClientAdapter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ