b1b8696bfdb75368d490ee865c5d23b2724f7d535dd0d8c3ac85160d9ecc193a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1b8696bfdb75368d490ee865c5d23b2724f7d535dd0d8c3ac85160d9ecc193a
Size

55KB
MD5

6db80d733e7601ea4b4547f8e8de8263
SHA1

4b1e66de277aca7619f97a132e31dd79189a3722
SHA256

b1b8696bfdb75368d490ee865c5d23b2724f7d535dd0d8c3ac85160d9ecc193a
SHA512

1f9643b5eddd3f51d61ea83b06c4c6edc19b9f386ed344f0ff3168d47e88810e8568c4aaf23fb74cc494537701a6c95e27c8e2baa4811e6e018525ca24e1bb81
SSDEEP

768:B5PeGJeO1fuDLy+j1tELKBP3YGjC9zGz+kP6w84p2sVT2uHcuP1Xw/lrbcsm3k:nW030Oaz13hEGz+kPl85cBVPaNrbcsm

Score

N/A

Malware Config

Signatures

Files

b1b8696bfdb75368d490ee865c5d23b2724f7d535dd0d8c3ac85160d9ecc193a
.exe windows x86

af060ac40ad29c67dc6d8391e0e82d11

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strstr
ZwCreateFile
strcpy

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE