821bbf7a166a3cdc8552699fb1170268b3d3475d493a6023354c150d33d3937f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

821bbf7a166a3cdc8552699fb1170268b3d3475d493a6023354c150d33d3937f
Size

92KB
MD5

a2a3a6114d743d26e3ef462f77df8967
SHA1

93da1874c8dc4462f25e4a2b710942b1143137f0
SHA256

821bbf7a166a3cdc8552699fb1170268b3d3475d493a6023354c150d33d3937f
SHA512

0cfa444cb32d15f59d56d315ca469cd3634d3e7e5c4f1c1be0edba967bc102486258f982a68cd1ffaab23d950b1f70398149861b09bd3c1be1f074bacc34f092
SSDEEP

1536:tpY091kaDgf59MGMEfC3AJG+YRD5Z2VeJi5HB875J2J5/LW5x2VN1nDSi:c0wyetMw4AJji1AVeJilB8UIxQfnGi

Score

N/A

Malware Config

Signatures

Files

821bbf7a166a3cdc8552699fb1170268b3d3475d493a6023354c150d33d3937f
.dll windows x86

2324d8fb235f249c435aefbf05343e4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetFullPathNameW
SetEndOfFile
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetModuleHandleW
DeleteFileW
GetSystemInfo
GetVersionExW
SetFilePointerEx
GetCurrentThread
GetDriveTypeW
FormatMessageW
GetProcAddress
CreateHardLinkW
GetModuleHandleA
GetVolumeInformationW
GetTimeFormatW
LocalFree
GetFileSizeEx
GetDateFormatW
CloseHandle
GetLastError
CreateFileW
DeviceIoControl

advapi32

OpenEventLogW
LookupAccountSidW
RevertToSelf
LookupAccountNameW
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupPrivilegeValueW
CheckTokenMembership
CloseEventLog
OpenProcessToken
OpenThreadToken
ImpersonateSelf
ReadEventLogW
LookupAccountSidA

Exports

Exports

mxkagtd

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ