e4a4a8ebcc7568133dd20adac924374b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4a4a8ebcc7568133dd20adac924374b
Size

813KB
MD5

e4a4a8ebcc7568133dd20adac924374b
SHA1

f003d39b30e138d3c86862ee009eefba795279a6
SHA256

9321f45d3f0222468fcdd2c08dde67228ac986f65ff1035dab5de956074a309b
SHA512

dea807c2a6b844dcd6657f73289b7bcf16ad11b4d4f440229d9a169f69d06df8b21ab830d259179cf98032f19dc7d5c0a19612f96904bb292c335dc701e4dabb
SSDEEP

12288:WxyDgbasaR0yZVcqQ4oop3nx3YLjk5g8X2UiqHE6zDxYln/6He1qU/J7t:WSo/sZPQFcndYnMXtXEKxYl/6tmJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4a4a8ebcc7568133dd20adac924374b

Files

e4a4a8ebcc7568133dd20adac924374b
.exe windows:5 windows x86 arch:x86

6dc9b816feae60a94693455c07b5efcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexW
GetStringTypeA
GetTickCount
EnterCriticalSection
LoadLibraryA
GetConsoleTitleA
LeaveCriticalSection
GetCurrentProcess
SetCurrentDirectoryA
FoldStringA
GetPrivateProfileIntW
DeleteFileA
GetVolumePathNameW
SetEnvironmentVariableA
SetVolumeLabelA
SetStdHandle
lstrcpyA
HeapCreate
GetShortPathNameW

aaclient

OpenKeyReader
LoadClientAdapter
g_fnStartTransport
OpenKeyReaderWriter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ