69c525be362fe31e3ebb37093082ed81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69c525be362fe31e3ebb37093082ed81
Size

19KB
MD5

69c525be362fe31e3ebb37093082ed81
SHA1

d9fb6acddc82c49ce9bbe7f1095e376a9ec86a1e
SHA256

45df9297b57bac491c92654a796a4b7f2c536dc5bba879b2b8765e5c909480d9
SHA512

b575c1632cdfcad707f18f16c13ba848d304036ea47050b53c170ce2824bb2c71d18671187ba29c1663ce6c9b8d0a83a4524b6bcc108ba6927d213c4d2e3f868
SSDEEP

192:U7LlK0b00GZY6Wpo5rXPjtetGQoE/yLPkdoKnatPiq2P0x5Dgw/KR9pgaJacKAit:UNVGZXf/VPsoKnaBacxKw/sgrt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69c525be362fe31e3ebb37093082ed81

Files

69c525be362fe31e3ebb37093082ed81
.exe windows:4 windows x86 arch:x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE