7c611fdf56ac5d0f698571192e9041b14571ef6071b41f2aaef027b66b6c1d8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c611fdf56ac5d0f698571192e9041b14571ef6071b41f2aaef027b66b6c1d8b
Size

28KB
MD5

80474c8f6524da8b6cac61a4780af6d5
SHA1

c89a14ac1d2e693841dad55cb8e79cd89143688a
SHA256

7c611fdf56ac5d0f698571192e9041b14571ef6071b41f2aaef027b66b6c1d8b
SHA512

ced346837ca4760898699680dc5f0fb2b43a39ebd7812c4f24c7d9c505e51504ec7bcf5c0ef1efa1415027c85f06d10b473bee4abc42934a5c9787265264f1f3
SSDEEP

768:RlKj/Es27DSrVs3iyuDD+GS6I+Udq7gCQAq1+YWH98TzgvU5:RlKjExSRcMDD+GVgdkgtAq1+YWH9q9

Score

N/A

Malware Config

Signatures

Files

7c611fdf56ac5d0f698571192e9041b14571ef6071b41f2aaef027b66b6c1d8b
.exe windows x86

9e4783944ae21aba0aef16950a2069cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

wcslen
swprintf
wcscat
wcscpy
RtlInitUnicodeString
strncmp
MmGetSystemRoutineAddress
_strnicmp
RtlAnsiStringToUnicodeString
_except_handler3
strncpy
ZwClose
ZwOpenKey
_stricmp
IofCompleteRequest
_wcsnicmp
ExFreePool
_snprintf
ExAllocatePoolWithTag
ObfDereferenceObject
RtlCopyUnicodeString
_itow

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 874B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ