priv[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

priv.exe
Size

11.3MB
MD5

a9cea192004a94b874b3da4838e09188
SHA1

abb39cb70318f35ec1ae9aded4135696bbbdc034
SHA256

b2599aeca9eddd824a137e7c9745513a54829fa7949027b92e66d862f1d749e4
SHA512

287fefff2d7900c70bf1b54d1e0c2bdc2e2d76730251fbd0c45587d6d4fb6309694a19f945f66d34a4c868121c84d9fa53b22b552c62c9a48d65bdaae41281f9
SSDEEP

196608:asAidfS7lTGsNDUtAV+5XmB7I9EJSa3LYoFdctwez9EGUddGbKAT4S0my7fMqFCX:asA067lTGs5SZXmB7IeTLzEwezuGUrWF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
priv.exe

Files

priv.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 368KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

YES
Size: - Virtual size: 16.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 10.7MB - Virtual size: 10.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 392B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 368KB - Virtual size: 645KB

.data Size: 92KB - Virtual size: 204KB

.data Size: 11KB - Virtual size: 38KB

.data Size: 17KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 500B

.data Size: 512B - Virtual size: 488B

.data Size: 2KB - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 6KB

YES Size: - Virtual size: 16.2MB

.text Size: 10.7MB - Virtual size: 10.7MB

.data Size: 25KB - Virtual size: 25KB

.data Size: 45KB - Virtual size: 45KB

.reloc Size: 392B - Virtual size: 4KB

.text
Size: 368KB - Virtual size: 645KB

.data
Size: 92KB - Virtual size: 204KB

.data
Size: 11KB - Virtual size: 38KB

.data
Size: 17KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 500B

.data
Size: 512B - Virtual size: 488B

.data
Size: 2KB - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 6KB

YES
Size: - Virtual size: 16.2MB

.text
Size: 10.7MB - Virtual size: 10.7MB

.data
Size: 25KB - Virtual size: 25KB

.data
Size: 45KB - Virtual size: 45KB

.reloc
Size: 392B - Virtual size: 4KB