ac5bcfeafe8e9256556699d7d0f0df9dddacd9dc3d458c7076a017521af8691d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac5bcfeafe8e9256556699d7d0f0df9dddacd9dc3d458c7076a017521af8691d
Size

63KB
MD5

6bcf0bc6e2300c2a4eae6b8ff358e334
SHA1

47b5699d6272db29407c4b0ba334315e74da0ec6
SHA256

ac5bcfeafe8e9256556699d7d0f0df9dddacd9dc3d458c7076a017521af8691d
SHA512

93aa8a0b148fe57d923f66b3f8fc976078fa08a7c039542b9fa31eb54cf5bfa1dce30a36f7b0b43d5f8a34487468c613dd623e1a8d1ece68ee248212ca8cf0e9
SSDEEP

1536:qO9NzK3hLMvT2GBmUNyWwKzvxVes43vXIEFoY/:qUNziLMr2G4jW7bD43vXIEFo

Score

N/A

Malware Config

Signatures

Files

ac5bcfeafe8e9256556699d7d0f0df9dddacd9dc3d458c7076a017521af8691d
.exe windows x86

ddf97d317ffda502d53ae4f61f7a4ee2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlGetGroupSecurityDescriptor
IoFreeIrp
InterlockedExchangeAdd
PsReturnPoolQuota
ExAllocatePoolWithTagPriority
PsChargeProcessPoolQuota
RtlCopyUnicodeString

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ