cc88078d645093d1e83922bfd89fd6c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc88078d645093d1e83922bfd89fd6c8
Size

812KB
MD5

cc88078d645093d1e83922bfd89fd6c8
SHA1

60fa2cd4898584b9eea6f665cbc719aa0b99a167
SHA256

938c241b1c664d86c01b2af51748eeecd75c66922458adcab434148e150d3f2e
SHA512

4a615a7f080869b366649d99c057c4ef23a29e801aab1870003b173f2db1fb358006ff2a5a3a6c89b6cbab1479288f6ca6c30b13a768f31c9f185c73744adda8
SSDEEP

24576:An5ZNg0NKKIXEQ7Yr/tgVdQpC2hjSoCCFxemsZ6ZpBHYlH0DvKxd0yrUrWNFnj:B0NK9XDggvQThjfCSxemCup+H0eCygyT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc88078d645093d1e83922bfd89fd6c8

Files

cc88078d645093d1e83922bfd89fd6c8
.exe windows:5 windows x86 arch:x86

faa1410600adb6434f40044952ec8b8b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
SetStdHandle
GetProcessVersion
LeaveCriticalSection
SetVolumeLabelA
GetCurrentProcess
GetStringTypeA
GetConsoleTitleA
GetTickCount
DeleteFileA
LoadLibraryA
SetCurrentDirectoryA
GetPrivateProfileIntW
CreateMutexW
FoldStringA
HeapCreate
lstrcpyW
EnterCriticalSection
SetEnvironmentVariableA

aaclient

LoadClientAdapter
OpenKeyReaderWriter
OpenKeyReader
g_fnStartTransport

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ