cb04c11db2b57545c929b9d2b94673f86b1301c684bc6e158df58e6287ee8b21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb04c11db2b57545c929b9d2b94673f86b1301c684bc6e158df58e6287ee8b21
Size

820KB
MD5

7fc3e8e7653c00d24d07ff5b34b005c9
SHA1

a8ac1b590fe41a6fd4040cb5826f372d07d46f5f
SHA256

cb04c11db2b57545c929b9d2b94673f86b1301c684bc6e158df58e6287ee8b21
SHA512

bd1a3c1d8fe947eb0991bfafc9ef17e49fe8fd02021ddb482f9b7ccf49c32d5c310c5e0056f493a92dc1c676b7fca729f12488dd91e5e71d2898a7b099dfb26a
SSDEEP

12288:o2fL6J3CH8R81klYVGlqdGs2Q0Pq0xOMHpvyAfRMXzQ+JBapv/YE6rnGGpx:1W3CH8ZXQos28YvyAf+XzbCvwb

Score

N/A

Malware Config

Signatures

Files

cb04c11db2b57545c929b9d2b94673f86b1301c684bc6e158df58e6287ee8b21
.exe windows x86

b784a91f5ccb9f529282983b13bdf91b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
SetCurrentDirectoryW
lstrcpynW
GetModuleHandleA
VirtualFree
SetThreadPriority
GetStringTypeW
GetPrivateProfileIntA
GetCommandLineA
VirtualProtectEx
CreateEventW
DeleteFileW
GetCurrentThreadId
TlsGetValue
FormatMessageA
TlsFree
GetModuleFileNameW
WriteConsoleA
GetFullPathNameW

aaclient

g_fnStartTransport
OpenKeyReaderWriter
LoadClientAdapter
OpenKeyReader

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ