d06863d9c13d2baac4788d64d601158c8982982caae607743d8449689a30f14b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d06863d9c13d2baac4788d64d601158c8982982caae607743d8449689a30f14b
Size

28KB
MD5

47010ea5c4577c13a4dfa880819e0b30
SHA1

328bd1731e0b64f6dc7680e368b9087bb8a1e9c4
SHA256

d06863d9c13d2baac4788d64d601158c8982982caae607743d8449689a30f14b
SHA512

365e3f5a9cd47eb39b9b47f50d77d732c56f78e404139192b68d397fad62570a11cf6135f4a75cf63783afd70e63a490ccca830d6ddb3ec44ea64a417d7f1b4e
SSDEEP

768:XqqTf94IfuEYgu4Foy+unA/Exv+A+bcp412Bx:XdTlVK4FolGAs0/bNkB

Score

N/A

Malware Config

Signatures

Files

d06863d9c13d2baac4788d64d601158c8982982caae607743d8449689a30f14b
.exe windows x86

7241eb30f64d44e9e7662c5b1bde870a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strncmp
swprintf
RtlInitUnicodeString
_strnicmp
wcslen
wcscat
wcscpy
_stricmp
strncpy
_wcsnicmp
ZwClose
ZwOpenKey
_itow
MmGetSystemRoutineAddress
RtlAnsiStringToUnicodeString
ObfDereferenceObject
_except_handler3
ExFreePool
_snprintf
ExAllocatePoolWithTag
RtlCopyUnicodeString
IofCompleteRequest

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 866B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ