d83c51fe8eb47e32900f46f7e3fcdb4696057ece751896a95cf4ab9d2139da09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d83c51fe8eb47e32900f46f7e3fcdb4696057ece751896a95cf4ab9d2139da09
Size

827KB
MD5

e0e148a72c232ca1e447ba4ff85b9198
SHA1

b769097a803bbf5bcac70e59c65f59824b938743
SHA256

d83c51fe8eb47e32900f46f7e3fcdb4696057ece751896a95cf4ab9d2139da09
SHA512

8f768081e76a972de3a2f518707a9d6f746fe9ac9163567cf4c9c7eae8159f3d1597b3b6ac993eeefe635488245119f6ec922043bc03670f0288b54cef61468e
SSDEEP

12288:d+FII+qNimsQlcUNMvC7XSQWiRacwTuzZ/suSL5dCDgKyQE/hV5xd3TguQLYWNQw:AFn9AmXlPd7XfNRacFGueehS7TgXNba

Score

N/A

Malware Config

Signatures

Files

d83c51fe8eb47e32900f46f7e3fcdb4696057ece751896a95cf4ab9d2139da09
.exe windows x86

bc06ea713b29979d2b4e9cbb345520a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapFree
CompareStringW
WriteConsoleA
GetDiskFreeSpaceW
ReadConsoleW
FindResourceA
GetEnvironmentVariableW
CreateSemaphoreA
GetPrivateProfileIntW
GetStringTypeA
GetLastError
GetShortPathNameA
GetModuleHandleA
lstrcmpW
lstrcatA
GetCurrentDirectoryW
HeapCreate
GetVolumeInformationA
GetTimeFormatA

gpedit

BrowseForGPO
ImportRSoPData
CreateGPOLink
DeleteGPOLink

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 804KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE