88a40cb5e27a892733e777ea65fc993bd73c18826970513c4da47bd858a5d3b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88a40cb5e27a892733e777ea65fc993bd73c18826970513c4da47bd858a5d3b3
Size

43KB
MD5

db0298004e6c006cdadb19bf6dcd905a
SHA1

0dfb97950bfe4516778711afcfd8fc0aba648981
SHA256

88a40cb5e27a892733e777ea65fc993bd73c18826970513c4da47bd858a5d3b3
SHA512

097e0fd319e9b41c557f2d1e531c6364779138e90c6eabb35edabc88953ab7948208340f4588524da1e2c9613bd89a4937ad719994a1f6497b92f7e2fcb3eb5d
SSDEEP

192:R7LlK0b00GZY6Wpo5rXPjtetGQoE/yLPkdoKnatPiq2P0x5Dgw/KR9pgaJacKAit:RNVGZXf/VPsoKnaBacxKw/sgrt1

Score

N/A

Malware Config

Signatures

Files

88a40cb5e27a892733e777ea65fc993bd73c18826970513c4da47bd858a5d3b3
.exe windows x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE