666143ce55e8215dbca5fc5970b1d99f143709d92b9ef0ce29c842907ee2c784 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

666143ce55e8215dbca5fc5970b1d99f143709d92b9ef0ce29c842907ee2c784
Size

70KB
MD5

60773a7b020a0ee574dab54ba5ff3730
SHA1

bf5b253afe580929682dc78f3b8a5622f168f9aa
SHA256

666143ce55e8215dbca5fc5970b1d99f143709d92b9ef0ce29c842907ee2c784
SHA512

318e246631981bc76acc6dac9486ad9858bec89c2fba73e48fe3ba148bb55cf7a550170a9f6d42f17849a16c7f12b8c93d7872d79ef917cfe79b9f70d2695164
SSDEEP

1536:TqxYszfjG8PSfw0nSXKXkyg2hfnXj6eqZ2KgfBK+rK3w:SYsLjG8QlSX/NEWeqUKaB3K3w

Score

N/A

Malware Config

Signatures

Files

666143ce55e8215dbca5fc5970b1d99f143709d92b9ef0ce29c842907ee2c784
.exe windows x86

f23c8173ea5a16b66ee76580066080d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
ExFreePoolWithTag
ExAllocatePoolWithTag
memset
RtlHashUnicodeString
RtlGetVersion
IoFreeIrp
IoAllocateIrp
RtlCharToInteger
KeTickCount
KeBugCheckEx

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 378B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ