c6441fbd16a76da7ff739c35eebc14eb10560094752704a2da4082d9560353d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6441fbd16a76da7ff739c35eebc14eb10560094752704a2da4082d9560353d3
Size

92KB
MD5

bccc38153e873fca38b9d6647db6de92
SHA1

26db5b4c6a9ec749f0a24da7ceef883acb6c7cfc
SHA256

c6441fbd16a76da7ff739c35eebc14eb10560094752704a2da4082d9560353d3
SHA512

23761fcd16e315767d859522508378817d38e05b302af9727a5b1b6984beb5997fb0dd384e14527fcc5709ac2d17a16835f18e24f33b51d65065697b08611bb0
SSDEEP

1536:WhafKUgPznV8yggAnlFzI352qKHW9L6cSV/b5JM0ryZLkmrx0xGAO0kfv7fVSecE:27PGHgAl+52qE8o/VJEk2x2ZwY

Score

N/A

Malware Config

Signatures

Files

c6441fbd16a76da7ff739c35eebc14eb10560094752704a2da4082d9560353d3
.dll windows x86

f37e4aad2a5b8810bf0df3a779cd1e8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ReadEventLogW
ImpersonateSelf
OpenThreadToken
OpenProcessToken
CloseEventLog
CheckTokenMembership
LookupPrivilegeValueW
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupAccountNameW
RevertToSelf
LookupAccountSidW
OpenEventLogW
EqualDomainSid
IsWellKnownSid

Exports

Exports

mhakcm

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ