bd5f1a403ca5bce3f02c839d11feb54862a15c8ae948710c9f80813987b165d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd5f1a403ca5bce3f02c839d11feb54862a15c8ae948710c9f80813987b165d8
Size

29KB
MD5

91d2d0763cd1ecc464ec8cf38b0b9d7d
SHA1

60898c8b749c956e44c0dcb0a9a4e1409c62e59b
SHA256

bd5f1a403ca5bce3f02c839d11feb54862a15c8ae948710c9f80813987b165d8
SHA512

e853e5114ae493fd3fd6b4bb2a2c500d9887876c9861d32f9e2fe4556c27b408cf801d9327e4073822b853f66cd1e518b1dbd4ad824270944067f75ca59edea0
SSDEEP

768:wtlNs1X2PPUVBHdxXtTPPNaPR3hkelKQwg0IvsJ9I+tJHDUlRoG3w4PUPPPtP0PD:w1sv9xXS/ogZsFUlSG33

Score

N/A

Malware Config

Signatures

Files

bd5f1a403ca5bce3f02c839d11feb54862a15c8ae948710c9f80813987b165d8
.exe windows x86

caed740047327835987440169debea21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsGetCurrentProcessId

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 96B - Virtual size: 86B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ