7253059f61c0e6c797936d7f8d08375d4e2ae4083b4131a71c5dbfb6fda845f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7253059f61c0e6c797936d7f8d08375d4e2ae4083b4131a71c5dbfb6fda845f4
Size

28KB
MD5

3e06e9e0b56ce58a2e3336d25a4f5a20
SHA1

4d09a4fd5c13c6a395220b05a44e733f8b52f18c
SHA256

7253059f61c0e6c797936d7f8d08375d4e2ae4083b4131a71c5dbfb6fda845f4
SHA512

fbbdd1bd7f4d11d603657cf2024f795038e8cef7a8d324135922ae7f1d522977e018da7fa77bf611382c7df7a97eae6c108153940a95230ffe47eeba73073f82
SSDEEP

768:3ypgp69p5Tl1yIQPxn4CSpBjn531ulWHCpxB4Z1nvmZG/NWgyDP:CA8pL1yRPZ4Tb1+WHQxB4PneZG

Score

N/A

Malware Config

Signatures

Files

7253059f61c0e6c797936d7f8d08375d4e2ae4083b4131a71c5dbfb6fda845f4
.exe windows x86

baa6b4c0cd064dfa893f544027efb117

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_strnicmp
RtlInitUnicodeString
ZwClose
ZwOpenKey
strncmp
wcslen
swprintf
ObfDereferenceObject
ExFreePool
_snprintf
ExAllocatePoolWithTag
_wcsnicmp
wcscat
wcscpy
_except_handler3
_stricmp
strncpy
RtlCopyUnicodeString
IofCompleteRequest
_itow
MmGetSystemRoutineAddress
RtlAnsiStringToUnicodeString

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 866B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ