e1d3c76e14900487e3d120c04d9f20c0a92867f0d1ee3a40d07b3db2b51a1fca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1d3c76e14900487e3d120c04d9f20c0a92867f0d1ee3a40d07b3db2b51a1fca
Size

827KB
MD5

30644efa1c94d31dd315746b5fe6286d
SHA1

f8a629038e4c0a897a13a9c4ba5c9a627c667d07
SHA256

e1d3c76e14900487e3d120c04d9f20c0a92867f0d1ee3a40d07b3db2b51a1fca
SHA512

7c31dda2bf831444276a4cc8eb00e76f1b5ae613c02e29c6d7d6160298188ae99c059d4ba8e90db2e09499d4c47ea8fab1360585a70d560b8806008b6ca71311
SSDEEP

24576:llLSf+LQeKFl87zdmZpW8iGXxCIcJnuhf2yMBNKt:GGPKb+zdmZo1Zux1MB

Score

N/A

Malware Config

Signatures

Files

e1d3c76e14900487e3d120c04d9f20c0a92867f0d1ee3a40d07b3db2b51a1fca
.exe windows x86

3cf2fe6cfebba85cf55b7e2e30150284

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReadConsoleW
lstrcatA
HeapCreate
GetDiskFreeSpaceW
lstrcmpW
GetShortPathNameA
GetModuleHandleA
GetVolumeInformationA
GetEnvironmentVariableW
GetPrivateProfileIntW
GetCurrentDirectoryW
CreateSemaphoreA
GetStringTypeA
CompareStringW
GetTimeFormatA
HeapFree
WriteConsoleA
FindResourceA
GetLastError

gpedit

ImportRSoPData
DeleteGPOLink
BrowseForGPO
CreateGPOLink

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 804KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE