70b2c6b6c74c1ad8b85f3c3b55b03d21 | Triage

Sharing

General

Target

70b2c6b6c74c1ad8b85f3c3b55b03d21
Size

812KB
MD5

70b2c6b6c74c1ad8b85f3c3b55b03d21
SHA1

6f68ccd81c6520ca9e9b858f02e5f50e319ff4d0
SHA256

967963c655388dbd1020f110d14496e67dde7fa16c3ec0ea2d0b09d3a60b4fdd
SHA512

b5d2971de85f3c958e2f11319d6052629031496762c4997321f1e4bcfd26ff1d9478ab2e88ec84622012343b8e73fef4c2a6c813882c375a06f3e07f22271111
SSDEEP

12288:KJ3/CLaChS8MtDudUNNT/X3ceg7LmNowXdez0w/+6DjeIpcwroqATl/tfbDJuGxb:gPCThS8MtDuS7/XbC0jw/PpcWA7bsGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70b2c6b6c74c1ad8b85f3c3b55b03d21

Files

70b2c6b6c74c1ad8b85f3c3b55b03d21
.exe windows:5 windows x86 arch:x86

7e173920851c59b264a63fb197d2f68c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
LoadLibraryA
GetVolumePathNameW
lstrcpyA
SetVolumeLabelA
GetCurrentProcess
GetTickCount
DeleteFileA
SetStdHandle
GetShortPathNameW
CreateMutexW
GetConsoleTitleA
GetPrivateProfileIntW
SetCurrentDirectoryA
FoldStringA
EnterCriticalSection
SetEnvironmentVariableA
HeapCreate
GetStringTypeA

aaclient

OpenKeyReader
LoadClientAdapter
g_fnStartTransport
OpenKeyReaderWriter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ