1c51ab639a80942944d2e56b5fb953019a3939a099716f609b9a3c3627e12a14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c51ab639a80942944d2e56b5fb953019a3939a099716f609b9a3c3627e12a14
Size

14KB
MD5

6582fc878be89c3a3ffcd7e0c3169da0
SHA1

5e35b2ec4f93ec9c0a2143e394da8789c31fdcd5
SHA256

1c51ab639a80942944d2e56b5fb953019a3939a099716f609b9a3c3627e12a14
SHA512

b4d49cd8b7bed1b461644eeafdc15a64e735abad91ed9ceb7083dffe0ea7a0a154aa6879cf5b17127991684b3752885d835701e05b79faedfedab0a56d19f63f
SSDEEP

192:c8piE4RK9HeC7OVFtF3VwfWAbB06t/MTEPCiq+bicsFX4+lhBLBjMyuEnlrg2h:T4M9+eeArt06RMTN0GP7BjFdnfh

Score

N/A

Malware Config

Signatures

Files

1c51ab639a80942944d2e56b5fb953019a3939a099716f609b9a3c3627e12a14
.exe windows x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 512B - Virtual size: 349B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE