8d95d796cf3c237637d2d9c761e6145ea92d4019aca6b973395ed905f07e06df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d95d796cf3c237637d2d9c761e6145ea92d4019aca6b973395ed905f07e06df
Size

32KB
MD5

a00b7645c4aff34b7f2f5e1c971ad99d
SHA1

046ca29473df3a1c2c7b3e2d7efa9e4c0aa76cf3
SHA256

8d95d796cf3c237637d2d9c761e6145ea92d4019aca6b973395ed905f07e06df
SHA512

2e9322829d1bdbe2b4d47affc4b8c3c96b1ea1ee41498f8bc1a3f9db89bc4d6fb56da7cc3a1ca2411e82c5e9e471591b35e312ce83fae0d5ddd19554bee757d7
SSDEEP

768:EbPsmr2mtqhseLmQmuPYRjzlMeqQ+12Tc5ZsXQtCEHYk3kH:aPDohzLmQFAIaWkc5ZsXg3HYkUH

Score

N/A

Malware Config

Signatures

Files

8d95d796cf3c237637d2d9c761e6145ea92d4019aca6b973395ed905f07e06df
.exe windows x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE