93d8c828b651cd09ee51155c76bc750ab5d220bce70e0d580a2f82df09a19803 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93d8c828b651cd09ee51155c76bc750ab5d220bce70e0d580a2f82df09a19803
Size

92KB
MD5

bbddbd77fabbae8f14160ef0cd93f568
SHA1

b2ff8ca4f07058750b910f4962b42d1bef50ab26
SHA256

93d8c828b651cd09ee51155c76bc750ab5d220bce70e0d580a2f82df09a19803
SHA512

5bc7c14b19468acb7ed26ef31b39b2024ae246f9e9fcccfb63241e84a7634aa65452420617614e28dbd9aea781470904dc066e0471a87ee0f2dd5d68c1e9f9b5
SSDEEP

1536:O/52VIx+7DSOsxPS/wgxqvBLxbHpJf18zyYZVqNZf:OGIx+9/wkqvBNr+y

Score

N/A

Malware Config

Signatures

Files

93d8c828b651cd09ee51155c76bc750ab5d220bce70e0d580a2f82df09a19803
.dll windows x86

5732a7281bee18ec9c738faf63744436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ReadEventLogW
ImpersonateSelf
OpenThreadToken
OpenProcessToken
CloseEventLog
CheckTokenMembership
LookupPrivilegeValueW
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupAccountNameW
RevertToSelf
LookupAccountSidW
OpenEventLogW
LookupAccountSidA
EqualSid

Exports

Exports

sgyimu

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ