8100ee70fa59179ce985d1517b4da97b9d135651a901de1d56f4fc9e37f33189 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8100ee70fa59179ce985d1517b4da97b9d135651a901de1d56f4fc9e37f33189
Size

830KB
MD5

60209e972192378c3cd9c217f4688e86
SHA1

3cdc09c8c06be252671c8f9392ad2fb6f7bcf90c
SHA256

8100ee70fa59179ce985d1517b4da97b9d135651a901de1d56f4fc9e37f33189
SHA512

35b841931ba665ccd209728f5b5240b64ecb746a6ebc8cba393fd8473cbc999476d25acfba56f2838c48e09273ab91060c62ad978b4d869cb13a0e6153cb36c4
SSDEEP

24576:YaI02OvB7lskNb5ITpV9iqAeu0mPe1m8/hzf:Ya0GBR3hEV9ieBm8t

Score

N/A

Malware Config

Signatures

Files

8100ee70fa59179ce985d1517b4da97b9d135651a901de1d56f4fc9e37f33189
.exe windows x86

771898f7502b524b074399551adeda79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetLocaleInfoW
CompareStringA
GetTickCount
EnumResourceNamesA
LeaveCriticalSection
HeapCreate
CreateSemaphoreW
WaitForSingleObject
MoveFileExA
EnumCalendarInfoA
GetModuleHandleA
FindNextFileW
GetCurrentProcess
GetConsoleTitleW
SetEvent
GetDiskFreeSpaceA

gpedit

BrowseForGPO
CreateGPOLink
DeleteGPOLink
ImportRSoPData

Sections

.text2
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IDATA
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ