f1e1f877211f351a5505c4454c981265 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1e1f877211f351a5505c4454c981265
Size

65KB
MD5

f1e1f877211f351a5505c4454c981265
SHA1

14262ce6a291119498980ce18986849f0e70aba4
SHA256

697d24c75f1e7f6572234f8b25a1568cef6514b3a064a8aa82c00206c68c0f82
SHA512

b6c9241d09f2e484ffc6dd2fbfe4b56fb74ab7134793d1c680172c8f0a491a8ba80d118156f8e0917e4ef4a2aaad4b35f098c9dd2cf251fdc6eba1f2069dd87f
SSDEEP

1536:h8Udxv8cZMbWUlm6/HMtM9ws0sYlI6tpMunycaj1ib:h8YkcZ6aCHuTrsYlR4unmj1i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1e1f877211f351a5505c4454c981265

Files

f1e1f877211f351a5505c4454c981265
.exe windows:5 windows x86 arch:x86

2f74f3b8ec8983252ce2859267a0bee8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetPrivateProfileIntW
GetProcessVersion
GetStringTypeA
EnterCriticalSection
LoadLibraryA
GetConsoleTitleA
GetCurrentProcess
SetEnvironmentVariableA
HeapCreate
CreateMutexW
SetVolumeLabelA
FoldStringA
DeleteFileA
LeaveCriticalSection
GetTickCount
SetCurrentDirectoryA
GetShortPathNameW
SetStdHandle

aaclient

g_fnStartTransport
OpenKeyReader
OpenKeyReaderWriter
LoadClientAdapter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ