fc5636e69906ec50ff0cf8b24e5109381730329bfa724bec73bb05ef2566ad79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc5636e69906ec50ff0cf8b24e5109381730329bfa724bec73bb05ef2566ad79
Size

4KB
MD5

636100af2fa1dfe037bb268235ddfab7
SHA1

ad3649e72a67042e5472171e6ca1628a9505f2b6
SHA256

fc5636e69906ec50ff0cf8b24e5109381730329bfa724bec73bb05ef2566ad79
SHA512

b977936582b8581cb8d94ac4b44554831d237a081734bb6d6a99f5df294e0bebdc8b8a962bf6cce6f38fb01facf580b82cfd8d8befe8b4de7861cd1248ee4631
SSDEEP

48:I1BHtibzA2jtoZxOM6922XZqCbmXGY8t7MatYy7RoYwqcfqPqPrxbslOI5AyQ:+w+xB0yXamOPcyiPrxjI5AyQ

Score

N/A

Malware Config

Signatures

Files

fc5636e69906ec50ff0cf8b24e5109381730329bfa724bec73bb05ef2566ad79
.exe windows x86

9083d860012824450b2c94f76807bb33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlAppendUnicodeToString
RtlInitUnicodeString
ExFreePoolWithTag
wcslen
memmove
ExAllocatePoolWithTag
RtlCompareUnicodeString
_except_handler3
KeTickCount
KeBugCheckEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 366B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ