a6b636c289086a2e350f9a4e0fefbebe481d65160a52905c7ec6e1281835d125 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6b636c289086a2e350f9a4e0fefbebe481d65160a52905c7ec6e1281835d125
Size

19KB
MD5

70e969d204dd931b6be1bd4e2c0fd770
SHA1

848cdc7bdc78766d2cfa1a410a4d16f45d834237
SHA256

a6b636c289086a2e350f9a4e0fefbebe481d65160a52905c7ec6e1281835d125
SHA512

69856d83be8f35c7eecbb8ef9b80afe87080107e386eb466d006e4ad949e6fea4364c4f6c183576132a7bd6aa5a4a75d18c3ab8bd7b7be52409c6361427ded28
SSDEEP

192:Q7LlK0b00GZY6Wpo5rXPjtetGQoE/yLPkdoKnatPiq2P0x5DYw/KR9pgaJacKAi3:QNVGZXf/VPsoKnaBacxaw/sgrt1kMxP

Score

N/A

Malware Config

Signatures

Files

a6b636c289086a2e350f9a4e0fefbebe481d65160a52905c7ec6e1281835d125
.exe windows x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE