a310logger | 5bd21f7284be33d64ad3bf5d8a3451c1 | Triage

Sharing

General

Target

5bd21f7284be33d64ad3bf5d8a3451c1
Size

687KB
MD5

5bd21f7284be33d64ad3bf5d8a3451c1
SHA1

3352f0aac96baf7a92a5fce411e6ff113c3faa48
SHA256

94cc127463d03b9a48943c7e034d0859b60968ac7b86d1fbbd3e3ca6b36677d8
SHA512

525623417de1a24158ceb9a7e8262832dd2ab694f0fac5a0537f15444f5a27d747f1dee60725d0fe9e58d0ddf1f6e963bb6d6efb46801c91776b4114151f3671
SSDEEP

12288:gcEZadB74YDfjgbmeNMuUZiiA2COmv/90AQL0W:gzabLDSmsUtyV90DL3

Score

10^/10

a310logger

Malware Config

Signatures

A310logger Executable 1 IoCs

Processes:

resource yara_rule

sample a310logger
A310logger family
a310logger
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

5bd21f7284be33d64ad3bf5d8a3451c1

Files

5bd21f7284be33d64ad3bf5d8a3451c1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ