71b47efc2d874b8d9dd583fbcd8d5c5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71b47efc2d874b8d9dd583fbcd8d5c5f
Size

812KB
MD5

71b47efc2d874b8d9dd583fbcd8d5c5f
SHA1

be05d95d5bb99d58ceb0aae08ff61fbb2863c761
SHA256

fd77e1c3cfb12f8fcf6f6c1760f9aea56bf2c83e91febdb7d921803b721cc00e
SHA512

2eca40fa8f5925b4ab3baff02f4e902a3d1b8ca5c7e19e2a11b0f1696b10efe9b6ba92733c110a1ef0b3920be60db2d09edad6fe428d46646afb570b08dccc5d
SSDEEP

24576:cmC8xcvrPWz/npkcmGJcst1RVGCBGzMjS+ncSYUvEXwN:bC8xcvrObpkfCcwXEOLnXBZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71b47efc2d874b8d9dd583fbcd8d5c5f

Files

71b47efc2d874b8d9dd583fbcd8d5c5f
.exe windows:5 windows x86 arch:x86

da332d749ef9494de15a9a57ddeb37b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
GetCurrentProcess
GetProcessVersion
GetStringTypeA
FoldStringA
LeaveCriticalSection
GetPrivateProfileIntW
GetTickCount
lstrcpyW
LoadLibraryA
HeapCreate
SetCurrentDirectoryA
SetVolumeLabelA
DeleteFileA
SetStdHandle
GetShortPathNameW
SetEnvironmentVariableA
CreateMutexW
EnterCriticalSection

aaclient

OpenKeyReader
LoadClientAdapter
OpenKeyReaderWriter
g_fnStartTransport

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ