5f9ade437bd7cbf3ca1b9fae1e6af68e0bea059d04c5d499ef48309c5592a965 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f9ade437bd7cbf3ca1b9fae1e6af68e0bea059d04c5d499ef48309c5592a965
Size

22KB
MD5

0a6a0c5046bac369743cfb9e75c7b7d7
SHA1

d91f9aeda9c10831f66b59fe8056b070e03b2350
SHA256

5f9ade437bd7cbf3ca1b9fae1e6af68e0bea059d04c5d499ef48309c5592a965
SHA512

f6e09c4691faf6f36d5307c4db37d66899727c1471db8bcc0c0cece2d44b2fe879878b1a4d98619ac2d42569d77f42d940d9fc192d3604caabd7975b8fe885b0
SSDEEP

384:2TgodExSeP11koq7Mk4Kbxox1kOtZe/MN9u4gO2Qc:2TJe9KhMlKbx+kOtZdYV

Score

N/A

Malware Config

Signatures

Files

5f9ade437bd7cbf3ca1b9fae1e6af68e0bea059d04c5d499ef48309c5592a965
.exe windows x86

abae7fd550af54f2bf9dbabf44c1bd33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

wcslen
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
ObfReferenceObject
IoCreateFile
MmIsNonPagedSystemAddressValid

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 211B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ