f5d0bd57f9a84da1763fdc8ad4588fe0785ad8b215b957ee9b6a79ca9bd6987e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5d0bd57f9a84da1763fdc8ad4588fe0785ad8b215b957ee9b6a79ca9bd6987e
Size

70KB
MD5

1b7da093bd47266b7e9588a28cb72715
SHA1

01b7d41a851d4f100b38193cdcc2249a4b5e929b
SHA256

f5d0bd57f9a84da1763fdc8ad4588fe0785ad8b215b957ee9b6a79ca9bd6987e
SHA512

10923f2925128d470e27280ed4d3186f4c7158e956fe860f5886e1b5d5872adca54e43aac7ccc6eacb038bb421c94b78553768faf5d55e13d5fe26b89e3def88
SSDEEP

1536:6zgWsAo3XAtgbR+D+jX+oSCPHauokgBVoIkOG5hG2KIL9J:+Pro7t+DkkVwIUR

Score

N/A

Malware Config

Signatures

Files

f5d0bd57f9a84da1763fdc8ad4588fe0785ad8b215b957ee9b6a79ca9bd6987e
.exe windows x86

f5f80b93ca17495f2d6b6d0c8eba8362

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCreateAcl
ExFreePoolWithTag
ExAllocatePoolWithTagPriority
IoReleaseCancelSpinLock
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
WmiTraceMessage
IofCompleteRequest
ProbeForRead
IoCheckShareAccess

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ