a69ff9a13cb7fd292ff92ab29b4f0a3faf7bd0bdcc22fef0f46c46a2e7c33906 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a69ff9a13cb7fd292ff92ab29b4f0a3faf7bd0bdcc22fef0f46c46a2e7c33906
Size

4KB
MD5

96222350dcb68e7d4539ac6a6020eda0
SHA1

b9aaad059b04a502c86f9e19ea3d3a9d0073c02f
SHA256

a69ff9a13cb7fd292ff92ab29b4f0a3faf7bd0bdcc22fef0f46c46a2e7c33906
SHA512

211742a57bae26591e72656cd74ce27b9c22f9a33387c97f63511283918b81cc0468dcd7f2d9422ec07fc8d88207dd9e10f5766e3c0e5970401bef5f10acc246
SSDEEP

48:ZvtXp27Lce8LWwDL/x/gjYgvBp4+lJlRJF2dhNAMoBAAP:Z1IZ8LWwDOYMBp4+lJ7D2hcKA

Score

N/A

Malware Config

Signatures

Files

a69ff9a13cb7fd292ff92ab29b4f0a3faf7bd0bdcc22fef0f46c46a2e7c33906
.exe windows x86

aa57ab958c5dfd47adbac79d9c490f1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
Sleep
WriteFile
lstrcatA
lstrlenA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 933B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE