fe588fe77ab4056d3008b7ef8ecb6ab28255c0814af68b45d19636f3a2d1bee5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe588fe77ab4056d3008b7ef8ecb6ab28255c0814af68b45d19636f3a2d1bee5
Size

770KB
MD5

744a4e5e170c2618cd5aae7efc0296bc
SHA1

18a57ae4c808fd9e8108454c049eaa8a8ee0ecb5
SHA256

fe588fe77ab4056d3008b7ef8ecb6ab28255c0814af68b45d19636f3a2d1bee5
SHA512

6ed47106e30251f85d37cd568e400b55b5c74f8f28fd1cc0e166d12b9e276ff851a32335a9cec16ddc9e694120e137883f48b2bcaf9a1056d5f1098ec138d725
SSDEEP

24576:MXWfdwxNPYOL0JmBn14gpy13bffKE6Bpx0rHL:+WfdwbYmCmB14gpofC

Score

N/A

Malware Config

Signatures

Files

fe588fe77ab4056d3008b7ef8ecb6ab28255c0814af68b45d19636f3a2d1bee5
.exe windows x86

e022ad584d80347b7f625697416180de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
FindNextFileW
CreateSemaphoreW
GetLocaleInfoW
EnumResourceNamesA
GetDiskFreeSpaceA
GetModuleHandleA
MoveFileExA
HeapCreate
LeaveCriticalSection
CompareStringA
SetEvent
WaitForSingleObject
GetConsoleTitleW
EnumCalendarInfoA
GetTickCount

gpedit

DeleteGPOLink
ImportRSoPData
BrowseForGPO
CreateGPOLink

Sections

.text2
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IDATA
Size: 754KB - Virtual size: 759KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ