6d87c9a9cfbdc3a28535f59142591e97d89a600193d19ccc143af61e262061c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d87c9a9cfbdc3a28535f59142591e97d89a600193d19ccc143af61e262061c4
Size

28KB
MD5

149a761c64ee0612db9637409fe6e700
SHA1

3351579a90ab7427e4fb26035ac03459ec974faa
SHA256

6d87c9a9cfbdc3a28535f59142591e97d89a600193d19ccc143af61e262061c4
SHA512

5eb218ff970ec80c60a5ae0437bed2fd35087491ce05fd10d0a4d0e555f6e94a8815d5f177cac048cb2c7439161bd438b1cdaff4a5588f327e18d2021ab5ebf7
SSDEEP

768:yAuM4LllEiwUGaywRqyQt8wlPLqnpCI1soM6fT+9zhAyK22t:RuXEiyLyQt8qwUssoMH9+

Score

N/A

Malware Config

Signatures

Files

6d87c9a9cfbdc3a28535f59142591e97d89a600193d19ccc143af61e262061c4
.exe windows x86

306145479f20a977d3543efa3718c642

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strncpy
swprintf
ExFreePool
_snprintf
ExAllocatePoolWithTag
RtlInitUnicodeString
ObfDereferenceObject
wcscat
wcscpy
_itow
wcslen
_except_handler3
RtlCopyUnicodeString
_stricmp
RtlAnsiStringToUnicodeString
_strnicmp
IofCompleteRequest
MmGetSystemRoutineAddress
strncmp
ZwClose
ZwOpenKey
_wcsnicmp

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 928B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ