b60f6ce1c513638b3e9ab49be5c3193cfc187dff8710045f3870d8da9a1e27be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b60f6ce1c513638b3e9ab49be5c3193cfc187dff8710045f3870d8da9a1e27be
Size

87KB
MD5

6f663e62c99db29ce6cf29ab3b9a8ccf
SHA1

d952921670c857e3fae7fb122c3b2a1dbdfb47f3
SHA256

b60f6ce1c513638b3e9ab49be5c3193cfc187dff8710045f3870d8da9a1e27be
SHA512

92bd6d7f0db6e367668a2ae22655e60c7dc7b9d0554f5cede2e4c33a2ce13fbd3b63b7f0071608d527224a77028603529a2849d080e590af05ff162c550c77b1
SSDEEP

192:F7LlK0b00GZY6Wpo5rXPjtetGQoE/yLPkdoKnatPiq2P0x5Dgw/KR9pgaJacKAit:FNVGZXf/VPsoKnaBacxKw/sgrt1

Score

N/A

Malware Config

Signatures

Files

b60f6ce1c513638b3e9ab49be5c3193cfc187dff8710045f3870d8da9a1e27be
.exe windows x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE