9fbf24ba7534cc6b2d5f9925babb5b1dc8b3475122598751acfc9fa8f046a4d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fbf24ba7534cc6b2d5f9925babb5b1dc8b3475122598751acfc9fa8f046a4d2
Size

4KB
MD5

9eaec4c32cf200d83a666edf2623e91f
SHA1

a580a4110a423a892f7e3ca21676e65009e86842
SHA256

9fbf24ba7534cc6b2d5f9925babb5b1dc8b3475122598751acfc9fa8f046a4d2
SHA512

0b126b7ea56774355be59ac54c2e014d0b0208a7b99e62ac761043867317c8646e19f24f5a68539e35f6930869c896716544bd0995d4e2d948ac231d6decbdac

Score

N/A

Malware Config

Signatures

Files

9fbf24ba7534cc6b2d5f9925babb5b1dc8b3475122598751acfc9fa8f046a4d2
.exe windows x86

aba3aab417d20719f50ea0af12d8a472

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
LoadLibraryA
GetProcAddress
GetCurrentProcess
GetCommandLineA
lstrlenA
lstrcatA
ExitProcess

advapi32

RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA

Sections

.text
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ