5575a7483f170e24fcb77d835aefa58eab01cfca64bac122da8f5ef7a2e88258 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5575a7483f170e24fcb77d835aefa58eab01cfca64bac122da8f5ef7a2e88258
Size

820KB
MD5

a6d9b1ffd584034ed6a131b2b1dc9fa6
SHA1

c615c38d797e76052eaa16fff82bf0bf0a58118b
SHA256

5575a7483f170e24fcb77d835aefa58eab01cfca64bac122da8f5ef7a2e88258
SHA512

ee8f8cbab6b4e79e529ca39800d14ecabd6acf668d41e5ff2c5d178ce96b05c8671236279aa2995dd237feb5bc47060087a1d52284e37c74533ae785309e98fe
SSDEEP

24576:fMWLa127AI1OneaCi01TAcYbc6qMIuF5xdp6:W12InhD0nY5qpydp

Score

N/A

Malware Config

Signatures

Files

5575a7483f170e24fcb77d835aefa58eab01cfca64bac122da8f5ef7a2e88258
.exe windows x86

54f91c46a356b00db428881610cb6b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
WriteConsoleA
SetThreadPriority
lstrcpynW
TlsFree
GetCommandLineA
GetModuleHandleA
FormatMessageA
GetPrivateProfileIntA
GetFullPathNameW
GetCurrentThreadId
GetStringTypeW
GetModuleFileNameW
VirtualProtect
TlsGetValue
SetCurrentDirectoryW
DeleteFileW
CreateEventW
lstrlenW

aaclient

OpenKeyReader
LoadClientAdapter
g_fnStartTransport
OpenKeyReaderWriter

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ