538ba75efcac68ac760e4a225c2a13e45e7f22b0cdd64917644cbf1dd65af3cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

538ba75efcac68ac760e4a225c2a13e45e7f22b0cdd64917644cbf1dd65af3cb
Size

37KB
MD5

1a053f0e6cc1cebb6956c38bc2f837ba
SHA1

c3d4bb730f8e75471ff3b6c96b26201f822c859b
SHA256

538ba75efcac68ac760e4a225c2a13e45e7f22b0cdd64917644cbf1dd65af3cb
SHA512

131e75594cad2c5e8d6bc9e47351b2e54a4862f295b5550fd8cdc91174346500ff74f7452cef5b9482cd9b851c9da65e5a4a18c0f37cb044491f5baec66314dd
SSDEEP

768:KxFR+eGEBBM34uLrGBdhBGiEna+4bJTa44GEDtc5:IFRpZe3X6hxE/4dTeGQtm

Score

N/A

Malware Config

Signatures

Files

538ba75efcac68ac760e4a225c2a13e45e7f22b0cdd64917644cbf1dd65af3cb
.exe windows x86

ac694e00a2633d6bf820fd81450354a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsCreateSystemThread
RtlInitUnicodeString
memcpy
RtlCompareUnicodeString
RtlFreeAnsiString
atoi
RtlFreeUnicodeString
RtlUnicodeStringToAnsiString
RtlQueryRegistryValues
memset
ExAllocatePoolWithTag
ExFreePool

Sections

.code
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 348B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 384B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ