bcfeb1dd3463cf6865c3aba03a051830c0546bfcb3baaba155b10acd65dd5dcc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcfeb1dd3463cf6865c3aba03a051830c0546bfcb3baaba155b10acd65dd5dcc
Size

39KB
MD5

026408f039e064580d6df728ec9ff6c0
SHA1

8890651799f91ba41667cab0759876940863e84f
SHA256

bcfeb1dd3463cf6865c3aba03a051830c0546bfcb3baaba155b10acd65dd5dcc
SHA512

9309731eb9b0e382fa030ecc9aad7cd73d80118b3dc267aa700fe4068c4f6cb4bea8851d4e18846d00d1170a5adc4361f9992c94d6d5dca58ebe2c2857a78006
SSDEEP

768:lSbsP2jrQ1VsP8K3D8ghvKhYmfKaWAlmWCOv5FNKPlO+MbiG1crC:YbDYVqrhvOYCW/OhFNsU+nn+

Score

N/A

Malware Config

Signatures

Files

bcfeb1dd3463cf6865c3aba03a051830c0546bfcb3baaba155b10acd65dd5dcc
.exe windows x86

a200036786bc5acb2e7e4f1854231502

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

IsValidSid
RegQueryValueW
AdjustTokenPrivileges
ProcessTrace
RegSetValueExA
DestroyPrivateObjectSecurity
EqualSid

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 676B - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ