3fbd34e9eb3e6e6cbb699f7585d6daea9d84dd3e769efadac5c742f1618192eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fbd34e9eb3e6e6cbb699f7585d6daea9d84dd3e769efadac5c742f1618192eb
Size

19KB
MD5

0e3ae4a12654fc15c1e678c0e11652bb
SHA1

8f2ba06d2f3b83047a0ac8f3f1d282d1284768ea
SHA256

3fbd34e9eb3e6e6cbb699f7585d6daea9d84dd3e769efadac5c742f1618192eb
SHA512

b8ba436c600221b82892747940b719476fa337cce805d7824b0ee968adfa6493bacd111642ab7fe8c3f6607d9ac4e58f5a3ed9ef36b741cd980bc19dbb9ac1e4
SSDEEP

192:47LlK0b00GZY6Wpo5rXPjtetGQoE/yLPkdoKnatPiq2P0x5Dgw/KR9pgaJacKAit:4NVGZXf/VPsoKnaBacxKw/sgrt1

Score

N/A

Malware Config

Signatures

Files

3fbd34e9eb3e6e6cbb699f7585d6daea9d84dd3e769efadac5c742f1618192eb
.exe windows x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yxaqzyq
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE