e1f47b90889d18c7369f97a13c63102d7fea169508a69357e801aa2c8aae14f0 | Triage

Sharing

General

Target

e1f47b90889d18c7369f97a13c63102d7fea169508a69357e801aa2c8aae14f0
Size

3KB
MD5

4d151902f894fe23d43870623e1e3883
SHA1

e24b5cad7fcb5761069141b613c88d81a9bd9682
SHA256

e1f47b90889d18c7369f97a13c63102d7fea169508a69357e801aa2c8aae14f0
SHA512

93eb40b940286d72119ba68fe72fcf0d00c7dc1102b5a539ecd31f6f23e84bed87fc09e15e8b0bda4c93905cb33af8d3d7eb9b8366052458dc899218da599db8

Score

N/A

Malware Config

Signatures

Files

e1f47b90889d18c7369f97a13c63102d7fea169508a69357e801aa2c8aae14f0
.exe windows x86

58de2bbbcb4b08efa4c15091292ad6f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
RtlUnwind
GetCurrentProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

FindWindowA

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE