116d314d234683eb566fd7300eb6173a635dd587c42ee0480bdb0647ccec23ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

116d314d234683eb566fd7300eb6173a635dd587c42ee0480bdb0647ccec23ed
Size

813KB
MD5

d252d4e523b65e2b2a62849d61e765a2
SHA1

1a763b8ccebd41706f906ecd4ade5231bac2b381
SHA256

116d314d234683eb566fd7300eb6173a635dd587c42ee0480bdb0647ccec23ed
SHA512

baa152e31c94a2bdf292819f490f8cdd39ebf5d521efa4114124b524e36d463ff34ea0ba9ce0a032a554bf55ea2a68fbc6d74a00d7507ec9e9564511e240dc69
SSDEEP

12288:bxyDgbasaR0yZVcqQ4oop3nx3YLjk5g8X2UiqHE6zDxYln/6He1qU/J7t:bSo/sZPQFcndYnMXtXEKxYl/6tmJ

Score

N/A

Malware Config

Signatures

Files

116d314d234683eb566fd7300eb6173a635dd587c42ee0480bdb0647ccec23ed
.exe windows x86

d320dee761ae96e4c0e895fa2b8103ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
SetCurrentDirectoryA
GetShortPathNameW
LeaveCriticalSection
SetVolumeLabelA
GetPrivateProfileIntW
EnterCriticalSection
DeleteFileA
SetStdHandle
CreateMutexW
LoadLibraryA
GetStringTypeA
HeapCreate
GetCurrentProcess
GetConsoleTitleA
lstrcpyA
GetVolumePathNameW
HeapFree
GetTickCount

aaclient

LoadClientAdapter
OpenKeyReaderWriter
g_fnStartTransport
OpenKeyReader

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ