7006c20806e0c8c9387c7bc7e5755a7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7006c20806e0c8c9387c7bc7e5755a7e
Size

812KB
MD5

7006c20806e0c8c9387c7bc7e5755a7e
SHA1

f4a58d385189731ebf6a451d6a4538c9f66995db
SHA256

de74e2edfa09985396bef33fc3dda948a0eb51c2abeb911c237ed35bcdc7cd5f
SHA512

1555289ef6c8f959bf8360bf74a5e85f5022b9aa778d8ceae2b67b621028c40c87e23ffba0b231d365e87fed71500132243b823f05de171f2dec4e239d158122
SSDEEP

24576:d4DvNFEWxDrVprpVOJK4Y2sUqfXSiESP:c/lDrVdbiY2sVfX/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7006c20806e0c8c9387c7bc7e5755a7e

Files

7006c20806e0c8c9387c7bc7e5755a7e
.exe windows:5 windows x86 arch:x86

020660f26b072fea5dcc5cae6a1bbba1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
HeapCreate
SetStdHandle
FoldStringA
GetTickCount
lstrcpyA
SetEnvironmentVariableA
LoadLibraryA
GetVolumePathNameW
DeleteFileA
LeaveCriticalSection
GetStringTypeA
GetConsoleTitleA
GetShortPathNameW
SetCurrentDirectoryA
GetCurrentProcess
CreateMutexW
GetPrivateProfileIntW
SetVolumeLabelA

aaclient

LoadClientAdapter
g_fnStartTransport
OpenKeyReader
OpenKeyReaderWriter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ