2e0b7b9320d226141843865f04917218fe025df24904c4e5290bed9f54b8e487 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e0b7b9320d226141843865f04917218fe025df24904c4e5290bed9f54b8e487
Size

112KB
MD5

a7365a15af07461de45fd14ce08b8fbc
SHA1

4a93971db6fb45451058309a10e79f188f8a34f9
SHA256

2e0b7b9320d226141843865f04917218fe025df24904c4e5290bed9f54b8e487
SHA512

b0884e38e74c20be8da415166bc86dffd462c9e107c092d6604765b4c7a89b2f071bd49beaa8df7a87b46474bfcefdb2da0b89e193526c5e43c5aa893cbdc0e7
SSDEEP

3072:FVLiObD1fT/LJLy0CPKpvrCfwAQ9N6xRhGonGgC:HiM1jLJLywY4qhHC

Score

N/A

Malware Config

Signatures

Files

2e0b7b9320d226141843865f04917218fe025df24904c4e5290bed9f54b8e487
.dll windows x86

f37e4aad2a5b8810bf0df3a779cd1e8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ReadEventLogW
ImpersonateSelf
OpenThreadToken
OpenProcessToken
CloseEventLog
CheckTokenMembership
LookupPrivilegeValueW
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupAccountNameW
RevertToSelf
LookupAccountSidW
OpenEventLogW
EqualDomainSid
IsWellKnownSid

Exports

Exports

blvmkt

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ