d4dccbde9f3c068e83f20b903ecb431eb2e18ec2b1fc11c815242deaa10f1935 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4dccbde9f3c068e83f20b903ecb431eb2e18ec2b1fc11c815242deaa10f1935
Size

29KB
MD5

1eb1ab9840e8c162445971b97ceb78c9
SHA1

0f88718af885c0a33c91e54a02d05fbc6f3c298b
SHA256

d4dccbde9f3c068e83f20b903ecb431eb2e18ec2b1fc11c815242deaa10f1935
SHA512

c87dab3595656011219e533899bd9d34129bb26d22bc18c22540a3a095daed8a51a4bfb5d29a24e06e05cb34f799b7dff4d3d50820c73caa4bb23b74d99d1e90
SSDEEP

768:EtlNsx3kY9PBJjJzVqLwBKuhMFuDdRZnHG:E1sVkYtfjJR7BZMFi7m

Score

N/A

Malware Config

Signatures

Files

d4dccbde9f3c068e83f20b903ecb431eb2e18ec2b1fc11c815242deaa10f1935
.exe windows x86

caed740047327835987440169debea21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsGetCurrentProcessId

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 96B - Virtual size: 86B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ