e6f59cbfdfc95b216756487f699bc2faa3e4ad57cf00c96df0a953c68e01fbbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6f59cbfdfc95b216756487f699bc2faa3e4ad57cf00c96df0a953c68e01fbbe
Size

813KB
MD5

7139af514847448ff9ad477c29d7aaa1
SHA1

0c36fb11ebea41a92fa84a1d613d5325a1783bdf
SHA256

e6f59cbfdfc95b216756487f699bc2faa3e4ad57cf00c96df0a953c68e01fbbe
SHA512

c71182c2675c26cb8b2baa4c1142eda226d637b6b34f70b0b73690aa82cc9a35e0c71a2bdb9192d00b9dc0a6e3d48d959f4d57728d5bc0e7230b8b4948a6aa79
SSDEEP

12288:19nBcndbM676/6DzMrjjAGQuccBv5vfBfks2NkCeEBJaxj5w1SUJU3fu5HBT:19IdbMwD38mq55ekCzDij6vJU3G5

Score

N/A

Malware Config

Signatures

Files

e6f59cbfdfc95b216756487f699bc2faa3e4ad57cf00c96df0a953c68e01fbbe
.exe windows x86

4f3dd638fea8b820b5b3955449b1312f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
GetPrivateProfileIntW
LoadLibraryA
HeapCreate
SetEnvironmentVariableA
LeaveCriticalSection
lstrcpyA
GetVolumePathNameW
CreateMutexW
EnterCriticalSection
SetStdHandle
GetStringTypeA
SetVolumeLabelA
GetShortPathNameW
DeleteFileA
FoldStringA
GetConsoleTitleA
GetCurrentProcess
GetTickCount

aaclient

LoadClientAdapter
OpenKeyReaderWriter
OpenKeyReader
g_fnStartTransport

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ