b249ca4c52c2fe1dc914ed42c53c12c97eafcee7e2fd655c6f6095dff2ffccf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b249ca4c52c2fe1dc914ed42c53c12c97eafcee7e2fd655c6f6095dff2ffccf7
Size

40KB
MD5

dd83f01d6dc9dac30d5ba29d238a9217
SHA1

c8ff508505abf4518c03baa57bc5027e22391888
SHA256

b249ca4c52c2fe1dc914ed42c53c12c97eafcee7e2fd655c6f6095dff2ffccf7
SHA512

a17ad16d717a8861b14436e0dfd9f2b1f97e3533e41485b0fc4c1718b10208d4d4cce355cdc4c45e8f489d4a0112dcf1aae813e7fc1cfb2c923f2abb5b1d1c39
SSDEEP

192:d7LlK0b00GZY6Wpo5rXPjtetGQoE/yLPkdoKnatPiq2P0x5Dgw/KR9pgaJacKAiZ:dNVGZXf/VPsoKnaBacxKw/sgrt1frz

Score

N/A

Malware Config

Signatures

Files

b249ca4c52c2fe1dc914ed42c53c12c97eafcee7e2fd655c6f6095dff2ffccf7
.exe windows x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE