81eb6e1e9a5933ac1c7f2f83f2b2235d466b9665ce919f5e5c58c02bfa1217b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81eb6e1e9a5933ac1c7f2f83f2b2235d466b9665ce919f5e5c58c02bfa1217b4
Size

88KB
MD5

41a5af50b5656bde1713cddc2fe70a54
SHA1

2a63e998e52f9c66af544e7407760997cd08b14e
SHA256

81eb6e1e9a5933ac1c7f2f83f2b2235d466b9665ce919f5e5c58c02bfa1217b4
SHA512

d593d696e8f8c2b90e4210d67e4024e669c02da03e15b59394d6e15c7526daca7014e2693d99faf0a9c043bb5c9abb97f225dfb6a208f4b95addb524a40946a2
SSDEEP

1536:ZFxVQjYmuG+6hfwa5AGHD2NUf8766sf4M4F7sege7HYZKCwafAssWDJQsXJdf+tJ:0IahD2mU766sf4zF7s7qYZKCjosZldXi

Score

N/A

Malware Config

Signatures

Files

81eb6e1e9a5933ac1c7f2f83f2b2235d466b9665ce919f5e5c58c02bfa1217b4
.dll windows x86

2324d8fb235f249c435aefbf05343e4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetFullPathNameW
SetEndOfFile
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetModuleHandleW
DeleteFileW
GetSystemInfo
GetVersionExW
SetFilePointerEx
GetCurrentThread
GetDriveTypeW
FormatMessageW
GetProcAddress
CreateHardLinkW
GetModuleHandleA
GetVolumeInformationW
GetTimeFormatW
LocalFree
GetFileSizeEx
GetDateFormatW
CloseHandle
GetLastError
CreateFileW
DeviceIoControl

advapi32

OpenEventLogW
LookupAccountSidW
RevertToSelf
LookupAccountNameW
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupPrivilegeValueW
CheckTokenMembership
CloseEventLog
OpenProcessToken
OpenThreadToken
ImpersonateSelf
ReadEventLogW
LookupAccountSidA

Exports

Exports

fhlsz

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ