99983161b2717062ee073894f9e1eee038194a2eae0ec34aa5b753ce592b8f1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99983161b2717062ee073894f9e1eee038194a2eae0ec34aa5b753ce592b8f1a
Size

21KB
MD5

28b0617db73eb02329c7cab76532a7c2
SHA1

c93f5ad38ffa8f5f50edd29abaf267b1e5cf2a73
SHA256

99983161b2717062ee073894f9e1eee038194a2eae0ec34aa5b753ce592b8f1a
SHA512

efa64021f6546e7eeda8753cf88e85c67c0ee45b73938f09fdd7f1c8fadb7e1009df2cb5e8f2f304abaa11864bd63db65759d9a4200a780dc07e788994d9ee98
SSDEEP

384:PwtnZuFhmZqrHmED5Uz897KSOH2TyBL0vA7a5rkHEwBwgiITBT:POZun/T5UgR3tTsgv0uWfBwcF

Score

N/A

Malware Config

Signatures

Files

99983161b2717062ee073894f9e1eee038194a2eae0ec34aa5b753ce592b8f1a
.exe windows x86

b39bcb41b3089f7ee6381cb3e82aa3f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePool
ExAllocatePoolWithTag
RtlInitUnicodeString
MmIsNonPagedSystemAddressValid
MmGetSystemRoutineAddress
ZwDeleteValueKey

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 225B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ