d571fe4511e8f873014acbf33653acdf3b5d6cd59300b4ae91a5a8c79fcfabf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d571fe4511e8f873014acbf33653acdf3b5d6cd59300b4ae91a5a8c79fcfabf4
Size

50KB
MD5

6eb90670175368de4bfbebb9ce8a043a
SHA1

c56d84e4ccc9203c891418b4b99b487ad89825f2
SHA256

d571fe4511e8f873014acbf33653acdf3b5d6cd59300b4ae91a5a8c79fcfabf4
SHA512

9f1b8f945458b8187bcf362dd27bc1925092737e1621191df7d7cd19265492d90a412f9455389c9ccd1a0692b2716298d158be9a8b1cbb86889e4f164cea30da
SSDEEP

1536:rGxWQOyu5jrvm/MriZ22P1w9dHlUrh+elOW:rGxst5kMGZ22PoFUYS

Score

N/A

Malware Config

Signatures

Files

d571fe4511e8f873014acbf33653acdf3b5d6cd59300b4ae91a5a8c79fcfabf4
.dll windows x86

f2207f451b765839c29fbb466e1e6dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_stricmp
ZwClose
strcpy

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE