ae32738dda2dac6824075b266edd06c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae32738dda2dac6824075b266edd06c6
Size

88KB
MD5

ae32738dda2dac6824075b266edd06c6
SHA1

4080096c363621c22bcf31c38bbdf2dae7fc96d3
SHA256

29a5e607105a836eb346976bc1151ae40a5fc88f89ae34b975aa4088ab55f691
SHA512

14d697f13243d7be4ec8654dd7931c8f4dba0313423e2caf1110cf35fa40939ff8508323a1fe06bddd9b462653e81dad2ca441547073b0c474f2f588efcc5f00
SSDEEP

1536:EPftJMAXsaDaPZAKnmMltY2316TdZIEVob5JcGfOaCMvraTAOdRgJuPH:CftJMvRAKfHuXIEKVfTvrazdyk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae32738dda2dac6824075b266edd06c6

Files

ae32738dda2dac6824075b266edd06c6
.dll windows:4 windows x86 arch:x86

5732a7281bee18ec9c738faf63744436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

moatecriunm.pdb

Imports

advapi32

ReadEventLogW
ImpersonateSelf
OpenThreadToken
OpenProcessToken
CloseEventLog
CheckTokenMembership
LookupPrivilegeValueW
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupAccountNameW
RevertToSelf
LookupAccountSidW
OpenEventLogW
LookupAccountSidA
EqualSid

Exports

Exports

wbuttql

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ