7b611f079e44c0d3f82a70586f8b7249d7f208fb5c8253a25ed21b9f894983b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b611f079e44c0d3f82a70586f8b7249d7f208fb5c8253a25ed21b9f894983b4
Size

19KB
MD5

6b5192bf30787df19b1e8065cfffc640
SHA1

e2d19226994967a4849d1b0d151fae66f6750604
SHA256

7b611f079e44c0d3f82a70586f8b7249d7f208fb5c8253a25ed21b9f894983b4
SHA512

65cb424dd1468085f76d047562cc13e48b7add152a6ecdf3eaee57c695b841f26dde176ad479fcd6ac39a4cd1f4feff05daf879a2a9e1d0b6ed1eb376cf20177
SSDEEP

192:47LlK0b00GZY6Wpo5rXPjtetGQoE/yLPkdoKnatPiq2P0x5Dgw/KR9pgaJacKAit:4NVGZXf/VPsoKnaBacxKw/sgrt1

Score

N/A

Malware Config

Signatures

Files

7b611f079e44c0d3f82a70586f8b7249d7f208fb5c8253a25ed21b9f894983b4
.exe windows x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE