1e8bbf646a63a43d59df19aecb477d62f7c939ab9b7e199879a85bb424c86ea6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e8bbf646a63a43d59df19aecb477d62f7c939ab9b7e199879a85bb424c86ea6
Size

810KB
MD5

a0d340430fc053adfbd7609edac25790
SHA1

917c9eac92cceda214187e5ee3cda5337267ed4b
SHA256

1e8bbf646a63a43d59df19aecb477d62f7c939ab9b7e199879a85bb424c86ea6
SHA512

87adb5e50a13451e2beb19d7fcdac167e93d6f972cc9683c980feb0c98745a83b65006f9d580be5c9747a9ccf93ddfcc6d5eb3f8c633743f94a8731ec3e778e3
SSDEEP

12288:+yeeuo7Zn41ACZRWUcUstNwvwp7EF8MLCPT56nujNl3BloDOSYqzAwjVdq6O4T6q:+yee+HTcDCKroeKDR/HVdXX6uHcZh+m

Score

N/A

Malware Config

Signatures

Files

1e8bbf646a63a43d59df19aecb477d62f7c939ab9b7e199879a85bb424c86ea6
.exe windows x86

28ab13eed7f6ce3d46a4862da02614a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetLogicalDriveStringsA
SetLastError
SetLastError
OpenMutexA
SetLastError
VirtualProtectEx
LoadLibraryExA
SetLastError
SetLastError
SetLastError
SetCurrentDirectoryA
CreateSemaphoreW
GetFullPathNameW
GetModuleHandleA
MoveFileW

rasdlg

DwTerminalDlg
RasDialDlgA
RasEntryDlgA
RasSrvEnumConnections

Sections

.code
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.udata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.gdata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ