cbe527c606b6d2dc156f16fa5817aaa650dd9a3d3ab7c1b54d29e99967405883 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbe527c606b6d2dc156f16fa5817aaa650dd9a3d3ab7c1b54d29e99967405883
Size

6KB
MD5

21d15480f713a3b0b474750f41962cd0
SHA1

3c565adc487d0a49f195353b4c2c2ab04c89167f
SHA256

cbe527c606b6d2dc156f16fa5817aaa650dd9a3d3ab7c1b54d29e99967405883
SHA512

4e99c0de5e81bcc6292e62f2f6be55428dc17f354ea4e60ce396798d9232334c7f5553a9c6fea4b41aac91e1ddedc0192da9ff05e97f06f3e392fe8acb3b2a2d
SSDEEP

96:NCacszOAQQB9FP5JRG1nbDidP6FV8VyOY1yKFaTh2kOy0cApxppVSz:NNz5Q07RGRviUsI/198XOzxH

Score

N/A

Malware Config

Signatures

Files

cbe527c606b6d2dc156f16fa5817aaa650dd9a3d3ab7c1b54d29e99967405883
.dll windows x86

e610606a11a87777a4b7b6452a47757a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
PsCreateSystemThread
RtlDeleteRegistryValue
RtlWriteRegistryValue
RtlCreateRegistryKey
ZwWriteFile
ExFreePoolWithTag
ZwReadFile
ExAllocatePoolWithTag
ZwQueryInformationFile
ZwCreateFile
RtlRandom
RtlCopyUnicodeString
RtlAppendUnicodeToString
RtlGetVersion
PsTerminateSystemThread
ZwLoadDriver
RtlAppendUnicodeStringToString
RtlQueryRegistryValues
KeDelayExecutionThread

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 128B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 568B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ