59fb83d1dd2e0efe1192b0ea030aef9aac043b4739c92ea555db169d969b37ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59fb83d1dd2e0efe1192b0ea030aef9aac043b4739c92ea555db169d969b37ee
Size

772KB
MD5

aaca5898a9f5767c7c92c1761ab8f6f8
SHA1

d931ae7c8538665d959b5673324a3368f1dc1b42
SHA256

59fb83d1dd2e0efe1192b0ea030aef9aac043b4739c92ea555db169d969b37ee
SHA512

ebf93251cf7ccf65f7dcaf8bc04fa582d3df253109072c15025d0d7377fa6484bf93c650e88845f668575851acfe7c9913e71b65e90880b314abd388f0e111b5
SSDEEP

24576:mXWfdwxNPYOL0JmBn14gpy13bffKE6Bpx0rHL:IWfdwbYmCmB14gpofC

Score

N/A

Malware Config

Signatures

Files

59fb83d1dd2e0efe1192b0ea030aef9aac043b4739c92ea555db169d969b37ee
.exe windows x86

7455eaa624650f7a88154ff464c9d406

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetCurrentProcess
GetLocaleInfoW
GetTickCount
WaitForSingleObject
CompareStringA
GetConsoleTitleW
MoveFileExA
LeaveCriticalSection
CreateEventA
EnumCalendarInfoA
CreateSemaphoreW
HeapCreate
GetCommandLineA
EnumResourceNamesW
GetModuleHandleA
FindNextFileW

gpedit

DeleteGPOLink
BrowseForGPO
ImportRSoPData
CreateGPOLink

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PDATA
Size: 755KB - Virtual size: 759KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ