369607ebf1c51aff907dbbace8b28372e0ddab25378b07afdffce02944c8e65a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

369607ebf1c51aff907dbbace8b28372e0ddab25378b07afdffce02944c8e65a
Size

28KB
MD5

235678db5d965fb010c500b565b38af0
SHA1

68a3f03e36a393c7348c7224783b3cee9fbbb089
SHA256

369607ebf1c51aff907dbbace8b28372e0ddab25378b07afdffce02944c8e65a
SHA512

9119da75e07842add12b20f801e0e2e37ec8d3392076311fc11d30ef115fbc97d83f5030023b72648677fa152fa4c209e89cf6e08046c9213558018e155fb38e
SSDEEP

768:F/CGm+XMqBS46/ueST4HTazckInxGyqU:hzm+8qe2ozazckQq

Score

N/A

Malware Config

Signatures

Files

369607ebf1c51aff907dbbace8b28372e0ddab25378b07afdffce02944c8e65a
.exe windows x86

a1a6fde37cfacc5e24da75dd26d33765

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlAnsiStringToUnicodeString
MmIsAddressValid
IofCompleteRequest
swprintf
wcscat
wcscpy
_stricmp
strncpy
RtlInitUnicodeString
MmGetSystemRoutineAddress
wcslen
ObfDereferenceObject
ObQueryNameString
ExFreePool
ExAllocatePoolWithTag
RtlCopyUnicodeString
RtlCompareUnicodeString
_strnicmp
ZwMapViewOfSection
ZwCreateSection
ZwOpenFile
ZwUnmapViewOfSection
_wcsnicmp
IoGetCurrentProcess
_snprintf
ZwQuerySystemInformation
strncmp
_except_handler3

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 704B - Virtual size: 686B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ